@xlt-token/nestjs 1.2.0 → 2.1.0

package/dist/index.cjs

@@ -1,8 +1,8 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
 let _nestjs_common = require("@nestjs/common");
 let _xlt_token_core = require("@xlt-token/core");
-let node_crypto = require("node:crypto");
-let node_module = require("node:module");
+let _xlt_token_store_redis = require("@xlt-token/store-redis");
+let _xlt_token_jwt = require("@xlt-token/jwt");
 let _nestjs_core = require("@nestjs/core");
 
 //#region \0@oxc-project+runtime@0.112.0/helpers/decorate.js
@@ -23,12 +23,12 @@ let XltTokenModule = class XltTokenModule {
 	static {
 		this.stpLogicProvider = {
 			provide: _xlt_token_core.StpLogic,
-			useFactory: (config, store, strategy, hooks) => new _xlt_token_core.StpLogic(config, store, strategy, hooks),
+			useFactory: (config, store, strategy, eventSink) => new _xlt_token_core.StpLogic(config, store, strategy, eventSink),
 			inject: [
 				_xlt_token_core.XLT_TOKEN_CONFIG,
 				_xlt_token_core.XLT_TOKEN_STORE,
 				_xlt_token_core.XLT_TOKEN_STRATEGY,
-				_xlt_token_core.XLT_TOKEN_HOOKS
+				_xlt_token_core.XLT_EVENT_SINK
 			]
 		};
 	}
@@ -75,7 +75,7 @@ let XltTokenModule = class XltTokenModule {
 				_XltTokenModule.createStoreProvider(store),
 				_XltTokenModule.createStrategyProvider(strategy),
 				_XltTokenModule.createStpInterfaceProvider(stpInterface),
-				_XltTokenModule.createHooksProvider(options.hooks),
+				_XltTokenModule.createEventSinkProvider(options.eventSink),
 				_XltTokenModule.stpLogicProvider,
 				_XltTokenModule.stpPermLogicProvider,
 				_XltTokenModule.initProvider,
@@ -102,7 +102,7 @@ let XltTokenModule = class XltTokenModule {
 				_XltTokenModule.createStoreProvider(store),
 				_XltTokenModule.createStrategyProvider(strategy),
 				_XltTokenModule.createStpInterfaceProvider(stpInterface),
-				_XltTokenModule.createHooksProvider(options.hooks),
+				_XltTokenModule.createEventSinkProvider(options.eventSink),
 				_XltTokenModule.stpLogicProvider,
 				_XltTokenModule.stpPermLogicProvider,
 				_XltTokenModule.initProvider,
@@ -126,12 +126,16 @@ let XltTokenModule = class XltTokenModule {
 		};
 	}
 	static createStrategyProvider(strategy) {
-		return strategy?.useClass ? {
+		if (!strategy) return {
+			provide: _xlt_token_core.XLT_TOKEN_STRATEGY,
+			useClass: _xlt_token_core.UuidStrategy
+		};
+		return "useClass" in strategy ? {
 			provide: _xlt_token_core.XLT_TOKEN_STRATEGY,
 			useClass: strategy.useClass
 		} : {
 			provide: _xlt_token_core.XLT_TOKEN_STRATEGY,
-			useClass: _xlt_token_core.UuidStrategy
+			useValue: strategy.useValue
 		};
 	}
 	static createStpInterfaceProvider(stpInterface) {
@@ -151,10 +155,10 @@ let XltTokenModule = class XltTokenModule {
 			}
 		};
 	}
-	static createHooksProvider(hooks) {
+	static createEventSinkProvider(eventSink) {
 		return {
-			provide: _xlt_token_core.XLT_TOKEN_HOOKS,
-			useValue: hooks ?? {}
+			provide: _xlt_token_core.XLT_EVENT_SINK,
+			useValue: eventSink ?? {}
 		};
 	}
 };
@@ -177,49 +181,9 @@ function __decorateParam(paramIndex, decorator) {
 //#endregion
 //#region src/store/redis-store.ts
 const XLT_REDIS_CLIENT = "XLT_REDIS_CLIENT";
-let RedisStore = class RedisStore {
+let RedisStore = class RedisStore extends _xlt_token_store_redis.RedisStore {
 	constructor(redisClient) {
-		this.redisClient = redisClient;
-	}
-	async get(key) {
-		return this.redisClient.get(key);
-	}
-	async set(key, value, timeoutSec) {
-		if (timeoutSec === -1) await this.redisClient.set(key, value);
-		else await this.redisClient.set(key, value, { EX: timeoutSec });
-	}
-	async delete(key) {
-		await this.redisClient.del(key);
-	}
-	async update(key, value) {
-		if (await this.redisClient.set(key, value, {
-			XX: true,
-			KEEPTTL: true
-		}) === null) throw new Error(`Key not found: ${key}`);
-	}
-	async has(key) {
-		return await this.redisClient.exists(key) === 1;
-	}
-	async updateTimeout(key, timeoutSec) {
-		if (!await this.redisClient.exists(key)) throw new Error(`Key not found: ${key}`);
-		if (timeoutSec === -1) await this.redisClient.persist(key);
-		else await this.redisClient.expire(key, timeoutSec);
-	}
-	async getTimeout(key) {
-		return await this.redisClient.ttl(key);
-	}
-	async keys(pattern) {
-		const result = [];
-		let cursor = "0";
-		do {
-			const reply = await this.redisClient.scan(cursor, {
-				MATCH: pattern,
-				COUNT: 100
-			});
-			cursor = String(reply.cursor);
-			result.push(...reply.keys);
-		} while (cursor !== "0");
-		return result;
+		super(redisClient);
 	}
 };
 RedisStore = __decorate([
@@ -229,57 +193,18 @@ RedisStore = __decorate([
 ], RedisStore);
 
 //#endregion
-//#region src/token/jwt-strategy.ts
-const require$1 = (0, node_module.createRequire)(require("url").pathToFileURL(__filename).href);
-let jsonwebtoken;
-function getJsonwebtoken() {
-	try {
-		jsonwebtoken ??= require$1("jsonwebtoken");
-		return jsonwebtoken;
-	} catch (error) {
-		if (error.code === "MODULE_NOT_FOUND") throw new Error("JwtStrategy requires the optional peer dependency \"jsonwebtoken\". Install it in your application with \"pnpm add jsonwebtoken\".");
-		throw error;
-	}
-}
-let JwtStrategy = class JwtStrategy {
-	constructor(config) {
-		this.config = config;
-	}
-	ensureJwtConfig(config) {
-		const jwt = (config ?? this.config).jwt;
-		if (!jwt || !jwt.secret) throw new Error("JwtStrategy requires jwt config with a secret. Provide { jwt: { secret: \"your-secret\" } } in the module config.");
-		return jwt;
-	}
-	createToken(loginId, config, options) {
-		const { sign } = getJsonwebtoken();
-		const jwt = this.ensureJwtConfig(config);
-		const jti = (0, node_crypto.randomUUID)();
-		const resolvedTimeout = options?.timeout ?? config.timeout;
-		const hasExpiry = typeof resolvedTimeout === "number" ? resolvedTimeout > 0 : true;
-		return sign({
-			sub: loginId,
-			jti
-		}, jwt.secret, {
-			algorithm: jwt.algorithm ?? "HS256",
-			...jwt.issuer && { issuer: jwt.issuer },
-			...jwt.audience && { audience: jwt.audience },
-			...hasExpiry && { expiresIn: resolvedTimeout }
-		});
-	}
-	generateToken(payload) {
-		const { sign } = getJsonwebtoken();
-		return sign(payload, this.ensureJwtConfig().secret);
-	}
-	verifyToken(token) {
-		const { verify } = getJsonwebtoken();
-		return verify(token, this.ensureJwtConfig().secret);
+//#region src/store/ioredis-store.ts
+const XLT_IOREDIS_CLIENT = "XLT_IOREDIS_CLIENT";
+let IORedisStore = class IORedisStore extends _xlt_token_store_redis.IORedisStore {
+	constructor(redisClient) {
+		super(redisClient);
 	}
 };
-JwtStrategy = __decorate([
+IORedisStore = __decorate([
 	(0, _nestjs_common.Injectable)(),
-	__decorateParam(0, (0, _nestjs_common.Inject)(_xlt_token_core.XLT_TOKEN_CONFIG)),
+	__decorateParam(0, (0, _nestjs_common.Inject)(XLT_IOREDIS_CLIENT)),
 	__decorateMetadata("design:paramtypes", [Object])
-], JwtStrategy);
+], IORedisStore);
 
 //#endregion
 //#region src/decorators/xlt-check-login.decorator.ts
@@ -358,12 +283,23 @@ var NotLoginException = class NotLoginException extends _nestjs_common.Unauthori
 	constructor(type, token) {
 		super({
 			statusCode: 401,
+			code: NotLoginException.codeForType(type),
 			type,
 			message: NotLoginException.describeType(type)
 		});
 		this.type = type;
 		this.token = token;
 	}
+	static codeForType(type) {
+		return {
+			[_xlt_token_core.NotLoginType.NOT_TOKEN]: "TOKEN_MISSING",
+			[_xlt_token_core.NotLoginType.INVALID_TOKEN]: "TOKEN_INVALID",
+			[_xlt_token_core.NotLoginType.TOKEN_TIMEOUT]: "TOKEN_TIMEOUT",
+			[_xlt_token_core.NotLoginType.TOKEN_FREEZE]: "TOKEN_FREEZE",
+			[_xlt_token_core.NotLoginType.BE_REPLACED]: "TOKEN_REPLACED",
+			[_xlt_token_core.NotLoginType.KICK_OUT]: "TOKEN_KICKED_OUT"
+		}[type] ?? "TOKEN_INVALID";
+	}
 	static describeType(type) {
 		return {
 			[_xlt_token_core.NotLoginType.NOT_TOKEN]: "未提供 Token",
@@ -382,7 +318,9 @@ var NotPermissionException = class extends _nestjs_common.ForbiddenException {
 	constructor(permission, mode) {
 		super({
 			statusCode: 403,
-			type: "NOT_PERMISSION",
+			code: "PERMISSION_DENIED",
+			permission,
+			mode,
 			message: `缺少权限: ${Array.isArray(permission) ? permission.join(", ") : permission}`
 		});
 		this.permission = permission;
@@ -396,7 +334,9 @@ var NotRoleException = class extends _nestjs_common.ForbiddenException {
 	constructor(role, mode) {
 		super({
 			statusCode: 403,
-			type: "NOT_ROLE",
+			code: "ROLE_DENIED",
+			role,
+			mode,
 			message: `缺少角色: ${Array.isArray(role) ? role.join(", ") : role}`
 		});
 		this.role = role;
@@ -410,7 +350,8 @@ var NotSafeException = class extends _nestjs_common.ForbiddenException {
 	constructor(business) {
 		super({
 			statusCode: 403,
-			type: "NOT_SAFE",
+			code: "SAFE_REQUIRED",
+			business,
 			message: `二级认证未开启：${business}`
 		});
 		this.business = business;
@@ -567,10 +508,16 @@ Object.defineProperty(exports, 'DEFAULT_XLT_TOKEN_CONFIG', {
     return _xlt_token_core.DEFAULT_XLT_TOKEN_CONFIG;
   }
 });
+Object.defineProperty(exports, 'IORedisStore', {
+  enumerable: true,
+  get: function () {
+    return IORedisStore;
+  }
+});
 Object.defineProperty(exports, 'JwtStrategy', {
   enumerable: true,
   get: function () {
-    return JwtStrategy;
+    return _xlt_token_jwt.JwtStrategy;
   }
 });
 exports.LoginId = LoginId;
@@ -622,6 +569,13 @@ Object.defineProperty(exports, 'UuidStrategy', {
   }
 });
 exports.XLT_CHECK_SAFE_KEY = XLT_CHECK_SAFE_KEY;
+Object.defineProperty(exports, 'XLT_EVENT_SINK', {
+  enumerable: true,
+  get: function () {
+    return _xlt_token_core.XLT_EVENT_SINK;
+  }
+});
+exports.XLT_IOREDIS_CLIENT = XLT_IOREDIS_CLIENT;
 exports.XLT_REDIS_CLIENT = XLT_REDIS_CLIENT;
 Object.defineProperty(exports, 'XLT_STP_INTERFACE', {
   enumerable: true,
@@ -635,12 +589,6 @@ Object.defineProperty(exports, 'XLT_TOKEN_CONFIG', {
     return _xlt_token_core.XLT_TOKEN_CONFIG;
   }
 });
-Object.defineProperty(exports, 'XLT_TOKEN_HOOKS', {
-  enumerable: true,
-  get: function () {
-    return _xlt_token_core.XLT_TOKEN_HOOKS;
-  }
-});
 Object.defineProperty(exports, 'XLT_TOKEN_STORE', {
   enumerable: true,
   get: function () {
@@ -694,6 +642,12 @@ Object.defineProperty(exports, 'createExpressContext', {
     return _xlt_token_core.createExpressContext;
   }
 });
+Object.defineProperty(exports, 'createJwtStrategyConfig', {
+  enumerable: true,
+  get: function () {
+    return _xlt_token_jwt.createJwtStrategyConfig;
+  }
+});
 Object.defineProperty(exports, 'createMockHttpContext', {
   enumerable: true,
   get: function () {

package/dist/index.d.cts

@@ -1,6 +1,8 @@
 import * as _nestjs_common0 from "@nestjs/common";
 import { CanActivate, ExecutionContext, ForbiddenException, ModuleMetadata, Provider, UnauthorizedException } from "@nestjs/common";
-import { AuthResult, CreateOptions, DEFAULT_XLT_TOKEN_CONFIG, DeviceInfo, DurationInput, HttpContext, MemoryStore, NotLoginType, NotLoginType as NotLoginType$1, StpInterface, StpInterface as StpInterface$1, StpLogic, StpLogic as StpLogic$1, StpPermLogic, StpPermLogic as StpPermLogic$1, StpUtil, TokenStrategy, TokenStrategy as TokenStrategy$1, UuidStrategy, XLT_STP_INTERFACE, XLT_TOKEN_CONFIG, XLT_TOKEN_HOOKS, XLT_TOKEN_STORE, XLT_TOKEN_STRATEGY, XltHooks, XltHooks as XltHooks$1, XltMode, XltMode as XltMode$1, XltSession, XltTokenConfig, XltTokenConfig as XltTokenConfig$1, XltTokenConfigInput, XltTokenContext, XltTokenStore, XltTokenStore as XltTokenStore$1, createExpressContext, createMockHttpContext, createXltToken, matchPermission, setStpLogic, setStpPermLogic } from "@xlt-token/core";
+import { AuthResult, CreateOptions, DEFAULT_XLT_TOKEN_CONFIG, DeviceInfo, HttpContext, MemoryStore, NotLoginType, NotLoginType as NotLoginType$1, StpInterface, StpInterface as StpInterface$1, StpLogic, StpLogic as StpLogic$1, StpPermLogic, StpPermLogic as StpPermLogic$1, StpUtil, TokenStrategy, TokenStrategy as TokenStrategy$1, UuidStrategy, XLT_EVENT_SINK, XLT_STP_INTERFACE, XLT_TOKEN_CONFIG, XLT_TOKEN_STORE, XLT_TOKEN_STRATEGY, XltAuditEvent, XltEventSink, XltEventSink as XltEventSink$1, XltMode, XltMode as XltMode$1, XltSession, XltTokenConfig, XltTokenConfig as XltTokenConfig$1, XltTokenConfigInput, XltTokenContext, XltTokenStore, XltTokenStore as XltTokenStore$1, createExpressContext, createMockHttpContext, createXltToken, matchPermission, setStpLogic, setStpPermLogic } from "@xlt-token/core";
+import { IORedisClient, IORedisStore as IORedisStore$1, RedisClient, RedisStore as RedisStore$1 } from "@xlt-token/store-redis";
+import { JwtAlgorithm, JwtAudience, JwtKey, JwtKeyInput, JwtStrategy, JwtStrategyConfig, JwtStrategyConfigInput, XltJwtPayload, createJwtStrategyConfig } from "@xlt-token/jwt";
 import { Reflector } from "@nestjs/core";
 
 //#region src/xlt-token.module.d.ts
@@ -13,13 +15,15 @@ interface XltTokenModuleOptions {
   };
   strategy?: {
     useClass: new (...args: any[]) => TokenStrategy$1;
+  } | {
+    useValue: TokenStrategy$1;
   };
   isGlobal?: boolean;
   providers?: Provider[];
   stpInterface?: new (...args: any[]) => StpInterface$1;
-  hooks?: XltHooks$1;
+  eventSink?: XltEventSink$1;
 }
-interface XltTokenModuleAsyncOptions extends Pick<ModuleMetadata, 'imports'> {
+interface XltTokenModuleAsyncOptions extends Pick<ModuleMetadata, "imports"> {
   useFactory: (...args: any[]) => Promise<XltTokenModuleOptions> | XltTokenModuleOptions;
   inject?: any[];
   store?: {
@@ -29,11 +33,13 @@ interface XltTokenModuleAsyncOptions extends Pick<ModuleMetadata, 'imports'> {
   };
   strategy?: {
     useClass: new (...args: any[]) => TokenStrategy$1;
+  } | {
+    useValue: TokenStrategy$1;
   };
   isGlobal?: boolean;
   providers?: Provider[];
   stpInterface?: new (...args: any[]) => StpInterface$1;
-  hooks?: XltHooks$1;
+  eventSink?: XltEventSink$1;
 }
 declare class XltTokenModule {
   private static readonly stpLogicProvider;
@@ -60,38 +66,27 @@ declare class XltTokenModule {
   private static createStoreProvider;
   private static createStrategyProvider;
   private static createStpInterfaceProvider;
-  private static createHooksProvider;
+  private static createEventSinkProvider;
 }
 //#endregion
 //#region src/store/redis-store.d.ts
 declare const XLT_REDIS_CLIENT = "XLT_REDIS_CLIENT";
-declare class RedisStore implements XltTokenStore$1 {
-  private readonly redisClient;
-  constructor(redisClient: any);
-  get(key: string): Promise<string | null>;
-  set(key: string, value: string, timeoutSec: number): Promise<void>;
-  delete(key: string): Promise<void>;
-  update(key: string, value: string): Promise<void>;
-  has(key: string): Promise<boolean>;
-  updateTimeout(key: string, timeoutSec: number): Promise<void>;
-  getTimeout(key: string): Promise<number>;
-  keys(pattern: string): Promise<string[]>;
+/**
+ * @deprecated Import `RedisStore` from `@xlt-token/store-redis` and provide it
+ * through `store.useValue` for new applications.
+ */
+declare class RedisStore extends RedisStore$1 {
+  constructor(redisClient: RedisClient);
 }
 //#endregion
-//#region src/token/jwt-strategy.d.ts
-type XltJwtPayload = Record<string, any> & {
-  sub: string;
-  jti: string;
-};
-declare class JwtStrategy implements TokenStrategy$1<XltJwtPayload> {
-  private readonly config;
-  constructor(config: XltTokenConfig$1);
-  private ensureJwtConfig;
-  createToken(loginId: string, config: XltTokenConfig$1, options?: {
-    timeout?: DurationInput;
-  }): string;
-  generateToken(payload: any): string;
-  verifyToken(token: string): XltJwtPayload;
+//#region src/store/ioredis-store.d.ts
+declare const XLT_IOREDIS_CLIENT = "XLT_IOREDIS_CLIENT";
+/**
+ * @deprecated Import `IORedisStore` from `@xlt-token/store-redis` and provide it
+ * through `store.useValue` for new applications.
+ */
+declare class IORedisStore extends IORedisStore$1 {
+  constructor(redisClient: IORedisClient);
 }
 //#endregion
 //#region src/decorators/xlt-check-login.decorator.d.ts
@@ -191,6 +186,7 @@ declare class NotLoginException extends UnauthorizedException {
   readonly type: NotLoginType$1;
   readonly token: string | undefined;
   constructor(type: NotLoginType$1, token?: string);
+  private static codeForType;
   private static describeType;
 }
 //#endregion
@@ -214,5 +210,5 @@ declare class NotSafeException extends ForbiddenException {
   constructor(business: string);
 }
 //#endregion
-export { type AuthResult, type CreateOptions, DEFAULT_XLT_TOKEN_CONFIG, type DeviceInfo, type HttpContext, JwtStrategy, LoginId, MemoryStore, NotLoginException, NotLoginType, NotPermissionException, NotRoleException, NotSafeException, RedisStore, type StpInterface, StpLogic, StpPermLogic, StpUtil, type TokenStrategy, TokenValue, UuidStrategy, XLT_CHECK_SAFE_KEY, XLT_REDIS_CLIENT, XLT_STP_INTERFACE, XLT_TOKEN_CONFIG, XLT_TOKEN_HOOKS, XLT_TOKEN_STORE, XLT_TOKEN_STRATEGY, XltAbstractLoginGuard, XltCheckLogin, XltCheckPermission, XltCheckRole, XltCheckSafe, type XltHooks, XltIgnore, XltMode, XltSession, type XltTokenConfig, type XltTokenContext, XltTokenGuard, XltTokenModule, type XltTokenModuleAsyncOptions, type XltTokenModuleOptions, type XltTokenStore, createExpressContext, createMockHttpContext, createXltToken, matchPermission, setStpLogic, setStpPermLogic };
+export { type AuthResult, type CreateOptions, DEFAULT_XLT_TOKEN_CONFIG, type DeviceInfo, type HttpContext, IORedisStore, type JwtAlgorithm, type JwtAudience, type JwtKey, type JwtKeyInput, JwtStrategy, type JwtStrategyConfig, type JwtStrategyConfigInput, LoginId, MemoryStore, NotLoginException, NotLoginType, NotPermissionException, NotRoleException, NotSafeException, RedisStore, type StpInterface, StpLogic, StpPermLogic, StpUtil, type TokenStrategy, TokenValue, UuidStrategy, XLT_CHECK_SAFE_KEY, XLT_EVENT_SINK, XLT_IOREDIS_CLIENT, XLT_REDIS_CLIENT, XLT_STP_INTERFACE, XLT_TOKEN_CONFIG, XLT_TOKEN_STORE, XLT_TOKEN_STRATEGY, XltAbstractLoginGuard, type XltAuditEvent, XltCheckLogin, XltCheckPermission, XltCheckRole, XltCheckSafe, type XltEventSink, XltIgnore, type XltJwtPayload, XltMode, XltSession, type XltTokenConfig, type XltTokenContext, XltTokenGuard, XltTokenModule, type XltTokenModuleAsyncOptions, type XltTokenModuleOptions, type XltTokenStore, createExpressContext, createJwtStrategyConfig, createMockHttpContext, createXltToken, matchPermission, setStpLogic, setStpPermLogic };
 //# sourceMappingURL=index.d.cts.map

package/dist/index.d.cts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.cts","names":[],"sources":["../src/xlt-token.module.ts","../src/store/redis-store.ts","../src/token/jwt-strategy.ts","../src/decorators/xlt-check-login.decorator.ts","../src/decorators/xlt-ignore.decorator.ts","../src/decorators/login-id.decorator.ts","../src/decorators/token-value.decorator.ts","../src/decorators/xlt-check-permission.decorator.ts","../src/decorators/xlt-check-role.decorator.ts","../src/decorators/xlt-check-safe.decorator.ts","../src/guards/xlt-token.guard.ts","../src/guards/xlt-abstract-login.guard.ts","../src/exceptions/not-login.exception.ts","../src/exceptions/not-permission.exception.ts","../src/exceptions/not-role.exception.ts","../src/exceptions/not-safe.exception.ts"],"mappings":";;;;;;UAmBiB,qBAAA;EACb,MAAA,GAAS,OAAA,CAAQ,mBAAA;EACjB,KAAA;IAAU,QAAA,UAAkB,IAAA,YAAgB,eAAA;EAAA;IAAoB,QAAA,EAAU,eAAA;EAAA;EAC1E,QAAA;IAAa,QAAA,UAAkB,IAAA,YAAgB,eAAA;EAAA;EAC/C,QAAA;EACA,SAAA,GAAY,QAAA;EACZ,YAAA,WAAuB,IAAA,YAAgB,cAAA;EACvC,KAAA,GAAQ,UAAA;AAAA;AAAA,UAGK,0BAAA,SAAmC,IAAA,CAAK,cAAA;EACrD,UAAA,MAAgB,IAAA,YAAgB,OAAA,CAAQ,qBAAA,IAAyB,qBAAA;EACjE,MAAA;EACA,KAAA;IAAU,QAAA,UAAkB,IAAA,YAAgB,eAAA;EAAA;IAAoB,QAAA,EAAU,eAAA;EAAA;EAC1E,QAAA;IAAa,QAAA,UAAkB,IAAA,YAAgB,eAAA;EAAA;EAC/C,QAAA;EACA,SAAA,GAAY,QAAA;EACZ,YAAA,WAAuB,IAAA,YAAgB,cAAA;EACvC,KAAA,GAAQ,UAAA;AAAA;AAAA,cAIC,cAAA;EAAA,wBACe,gBAAA;EAAA,wBAUA,oBAAA;EAAA,wBASA,YAAA;EAAA,wBASA,aAAA;EAAA,OAEjB,OAAA,CAAQ,OAAA,GAAS,qBAAA;;;;;;SAqBjB,YAAA,CAAa,OAAA,EAAS,0BAAA;;;;;sCAkBoB,OAAA,CAAA,gBAAA;;;;;;iBAoBlC,mBAAA;EAAA,eASA,sBAAA;EAAA,eAQA,0BAAA;EAAA,eAiBA,mBAAA;AAAA;;;cCjKL,gBAAA;AAAA,cAIA,UAAA,YAAsB,eAAA;EAAA,iBAIf,WAAA;cAAA,WAAA;EAMb,GAAA,CAAI,GAAA,WAAY,OAAA;EAKhB,GAAA,CAAI,GAAA,UAAY,KAAA,UAAc,UAAA,WAAmB,OAAA;EASjD,MAAA,CAAO,GAAA,WAAY,OAAA;EAKnB,MAAA,CAAO,GAAA,UAAY,KAAA,WAAc,OAAA;EAQjC,GAAA,CAAI,GAAA,WAAY,OAAA;EAMhB,aAAA,CAAc,GAAA,UAAY,UAAA,WAAmB,OAAA;EAe7C,UAAA,CAAW,GAAA,WAAY,OAAA;EAUvB,IAAA,CAAK,OAAA,WAAkB,OAAA;AAAA;;;KClEnB,aAAA,GAAgB,MAAA;EAAwB,GAAA;EAAa,GAAA;AAAA;AAAA,cAmBpD,WAAA,YAAuB,eAAA,CAAc,aAAA;EAAA,iBAEH,MAAA;cAAA,MAAA,EAAQ,gBAAA;EAAA,QAG7C,eAAA;EAWR,WAAA,CAAY,OAAA,UAAiB,MAAA,EAAQ,gBAAA,EAAgB,OAAA;IAAY,OAAA,GAAU,aAAA;EAAA;EAkB3E,aAAA,CAAc,OAAA;EAMd,WAAA,CAAY,KAAA,WAAgB,aAAA;AAAA;;;;;;;cC3DjB,aAAA,QAA4D,eAAA,CAA/C,eAAA;;;cCLb,SAAA,QAAmD,eAAA,CAA1C,eAAA;;;;;;;cCGT,OAAA,MAAO,WAAA,gBAAA,kBAAA;;;;;;;cCCP,UAAA,MAAU,WAAA,YAAA,kBAAA;;;;;;;;ANUvB;;cORa,kBAAA,GAAsB,WAAA,qBAAgC,OAAA;EAAY,IAAA,EAAM,SAAA;AAAA,MAAO,eAAA,CAAG,eAAA;;;;;;;;APQ/F;;cQRa,YAAA,GAAgB,KAAA,qBAA0B,OAAA;EAAY,IAAA,EAAM,SAAA;AAAA,MAAO,eAAA,CAAG,eAAA;;;cCTtE,kBAAA;AAAA,cAEA,YAAA,GAAgB,QAAA,aAE5B,eAAA,CAF4C,eAAA;;;cCehC,aAAA,YAAyB,WAAA;EAAA,iBAEjB,SAAA;EAAA,iBAC0B,MAAA;EAAA,iBAC1B,QAAA;EAAA,iBACY,YAAA;cAHZ,SAAA,EAAW,SAAA,EACe,MAAA,EAAQ,gBAAA,EAClC,QAAA,EAAU,UAAA,EACE,YAAA,GAAe,cAAA;EAIxC,WAAA,CAAY,OAAA,EAAS,gBAAA,GAAmB,OAAA;EAAA,QA2CtC,aAAA;EAAA,QAiBA,WAAA;AAAA;;;uBCzEY,qBAAA,YAAiC,WAAA;EAAA,mBAEhC,SAAA,EAAW,SAAA;EAAA,mBACe,MAAA,EAAQ,gBAAA;EAAA,mBAClC,QAAA,EAAU,UAAA;EAAA,UAHtB,WAAA,CACY,SAAA,EAAW,SAAA,EACe,MAAA,EAAQ,gBAAA,EAClC,QAAA,EAAU,UAAA;EAGzB,WAAA,CAAY,GAAA,EAAK,gBAAA,GAAmB,OAAA;EAAA,UAuBhC,aAAA,CAAc,GAAA,EAAK,gBAAA;EAAA,UAQnB,aAAA,CAAA,CACR,MAAA;IACE,EAAA;IACA,OAAA;IACA,KAAA;IACA,MAAA,GAAS,cAAA;EAAA,GAEX,OAAA,eACQ,OAAA;EAAA,UAEA,UAAA,CAAA,CACR,MAAA;IACE,EAAA;IACA,OAAA;IACA,KAAA;IACA,MAAA,GAAS,cAAA;EAAA,GAEX,OAAA,eACQ,OAAA;EAAA,UAEA,kBAAA,CAAA,CACR,MAAA;IACE,EAAA;IACA,OAAA;IACA,KAAA;IACA,MAAA,GAAS,cAAA;EAAA,GAEX,OAAA,eACQ,OAAA;AAAA;;;cC9EC,iBAAA,SAA0B,qBAAA;EAAA,SACrB,IAAA,EAAM,cAAA;EAAA,SACN,KAAA;cAEJ,IAAA,EAAM,cAAA,EAAc,KAAA;EAAA,eAUjB,YAAA;AAAA;;;cCdJ,sBAAA,SAA+B,kBAAA;EAAA,SAC1B,UAAA;EAAA,SACA,IAAA,EAAM,SAAA;cAEV,UAAA,qBAA+B,IAAA,EAAM,SAAA;AAAA;;;cCJtC,gBAAA,SAAyB,kBAAA;EAAA,SACpB,IAAA;EAAA,SACA,IAAA,EAAM,SAAA;cAEV,IAAA,qBAAyB,IAAA,EAAM,SAAA;AAAA;;;cCLhC,gBAAA,SAAyB,kBAAA;EAAA,SAC3B,QAAA;cAGG,QAAA;AAAA"}
+{"version":3,"file":"index.d.cts","names":[],"sources":["../src/xlt-token.module.ts","../src/store/redis-store.ts","../src/store/ioredis-store.ts","../src/decorators/xlt-check-login.decorator.ts","../src/decorators/xlt-ignore.decorator.ts","../src/decorators/login-id.decorator.ts","../src/decorators/token-value.decorator.ts","../src/decorators/xlt-check-permission.decorator.ts","../src/decorators/xlt-check-role.decorator.ts","../src/decorators/xlt-check-safe.decorator.ts","../src/guards/xlt-token.guard.ts","../src/guards/xlt-abstract-login.guard.ts","../src/exceptions/not-login.exception.ts","../src/exceptions/not-permission.exception.ts","../src/exceptions/not-role.exception.ts","../src/exceptions/not-safe.exception.ts"],"mappings":";;;;;;;;UAyBiB,qBAAA;EACf,MAAA,GAAS,OAAA,CAAQ,mBAAA;EACjB,KAAA;IAAU,QAAA,UAAkB,IAAA,YAAgB,eAAA;EAAA;IAAoB,QAAA,EAAU,eAAA;EAAA;EAC1E,QAAA;IAAa,QAAA,UAAkB,IAAA,YAAgB,eAAA;EAAA;IAAoB,QAAA,EAAU,eAAA;EAAA;EAC7E,QAAA;EACA,SAAA,GAAY,QAAA;EACZ,YAAA,WAAuB,IAAA,YAAgB,cAAA;EACvC,SAAA,GAAY,cAAA;AAAA;AAAA,UAGG,0BAAA,SAAmC,IAAA,CAAK,cAAA;EACvD,UAAA,MAAgB,IAAA,YAAgB,OAAA,CAAQ,qBAAA,IAAyB,qBAAA;EACjE,MAAA;EACA,KAAA;IAAU,QAAA,UAAkB,IAAA,YAAgB,eAAA;EAAA;IAAoB,QAAA,EAAU,eAAA;EAAA;EAC1E,QAAA;IAAa,QAAA,UAAkB,IAAA,YAAgB,eAAA;EAAA;IAAoB,QAAA,EAAU,eAAA;EAAA;EAC7E,QAAA;EACA,SAAA,GAAY,QAAA;EACZ,YAAA,WAAuB,IAAA,YAAgB,cAAA;EACvC,SAAA,GAAY,cAAA;AAAA;AAAA,cAID,cAAA;EAAA,wBACa,gBAAA;EAAA,wBAUA,oBAAA;EAAA,wBAMA,YAAA;EAAA,wBASA,aAAA;EAAA,OAQjB,OAAA,CAAQ,OAAA,GAAS,qBAAA;;;;;;SA4BjB,YAAA,CAAa,OAAA,EAAS,0BAAA;;;;;sCAkBY,OAAA,CAAA,gBAAA;;;;;;iBAoB1B,mBAAA;EAAA,eAOA,sBAAA;EAAA,eAOA,0BAAA;EAAA,eAiBA,uBAAA;AAAA;;;cC/KJ,gBAAA;;;;;cAOA,UAAA,SAAmB,YAAA;cAG5B,WAAA,EAAa,WAAA;AAAA;;;cCVJ,kBAAA;;;;;cAOA,YAAA,SAAqB,cAAA;cAG9B,WAAA,EAAa,aAAA;AAAA;;;;;;;cCJJ,aAAA,QAA4D,eAAA,CAA/C,eAAA;;;cCJb,SAAA,QAAmD,eAAA,CAA1C,eAAA;;;;;;;cCGT,OAAA,MAAO,WAAA,gBAAA,kBAAA;;;;;;;cCAP,UAAA,MAAU,WAAA,YAAA,kBAAA;;;;;;;;;;cCEV,kBAAA,GAAsB,WAAA,qBAAgC,OAAA;EAAY,IAAA,EAAM,SAAA;AAAA,MAAO,eAAA,CAAE,eAAA;;;;;;;;;;cCAjF,YAAA,GAAgB,KAAA,qBAA0B,OAAA;EAAY,IAAA,EAAM,SAAA;AAAA,MAAO,eAAA,CAAE,eAAA;;;cCRrE,kBAAA;AAAA,cAEA,YAAA,GAAgB,QAAA,aAE5B,eAAA,CAF4C,eAAA;;;cCehC,aAAA,YAAyB,WAAA;EAAA,iBAEjB,SAAA;EAAA,iBAC0B,MAAA;EAAA,iBAC1B,QAAA;EAAA,iBACY,YAAA;cAHZ,SAAA,EAAW,SAAA,EACe,MAAA,EAAQ,gBAAA,EAClC,QAAA,EAAU,UAAA,EACE,YAAA,GAAe,cAAA;EAGxC,WAAA,CAAY,OAAA,EAAS,gBAAA,GAAmB,OAAA;EAAA,QA+CtC,aAAA;EAAA,QAiBA,WAAA;AAAA;;;uBC5EY,qBAAA,YAAiC,WAAA;EAAA,mBAEhC,SAAA,EAAW,SAAA;EAAA,mBACe,MAAA,EAAQ,gBAAA;EAAA,mBAClC,QAAA,EAAU,UAAA;EAAA,UAHtB,WAAA,CACY,SAAA,EAAW,SAAA,EACe,MAAA,EAAQ,gBAAA,EAClC,QAAA,EAAU,UAAA;EAGzB,WAAA,CAAY,GAAA,EAAK,gBAAA,GAAmB,OAAA;EAAA,UAuBhC,aAAA,CAAc,GAAA,EAAK,gBAAA;EAAA,UAgBnB,aAAA,CAAA,CACR,MAAA;IACE,EAAA;IACA,OAAA;IACA,KAAA;IACA,MAAA,GAAS,cAAA;EAAA,GAEX,OAAA,eACQ,OAAA;EAAA,UAEA,UAAA,CAAA,CACR,MAAA;IACE,EAAA;IACA,OAAA;IACA,KAAA;IACA,MAAA,GAAS,cAAA;EAAA,GAEX,OAAA,eACQ,OAAA;EAAA,UAEA,kBAAA,CAAA,CACR,MAAA;IACE,EAAA;IACA,OAAA;IACA,KAAA;IACA,MAAA,GAAS,cAAA;EAAA,GAEX,OAAA,eACQ,OAAA;AAAA;;;cCtFC,iBAAA,SAA0B,qBAAA;EAAA,SACrB,IAAA,EAAM,cAAA;EAAA,SACN,KAAA;cAEJ,IAAA,EAAM,cAAA,EAAc,KAAA;EAAA,eAWjB,WAAA;EAAA,eAYA,YAAA;AAAA;;;cC3BJ,sBAAA,SAA+B,kBAAA;EAAA,SAC1B,UAAA;EAAA,SACA,IAAA,EAAM,SAAA;cAEV,UAAA,qBAA+B,IAAA,EAAM,SAAA;AAAA;;;cCJtC,gBAAA,SAAyB,kBAAA;EAAA,SACpB,IAAA;EAAA,SACA,IAAA,EAAM,SAAA;cAEV,IAAA,qBAAyB,IAAA,EAAM,SAAA;AAAA;;;cCLhC,gBAAA,SAAyB,kBAAA;EAAA,SAC3B,QAAA;cAEG,QAAA;AAAA"}

package/dist/index.d.mts

@@ -1,6 +1,8 @@
 import * as _nestjs_common0 from "@nestjs/common";
 import { CanActivate, ExecutionContext, ForbiddenException, ModuleMetadata, Provider, UnauthorizedException } from "@nestjs/common";
-import { AuthResult, CreateOptions, DEFAULT_XLT_TOKEN_CONFIG, DeviceInfo, DurationInput, HttpContext, MemoryStore, NotLoginType, NotLoginType as NotLoginType$1, StpInterface, StpInterface as StpInterface$1, StpLogic, StpLogic as StpLogic$1, StpPermLogic, StpPermLogic as StpPermLogic$1, StpUtil, TokenStrategy, TokenStrategy as TokenStrategy$1, UuidStrategy, XLT_STP_INTERFACE, XLT_TOKEN_CONFIG, XLT_TOKEN_HOOKS, XLT_TOKEN_STORE, XLT_TOKEN_STRATEGY, XltHooks, XltHooks as XltHooks$1, XltMode, XltMode as XltMode$1, XltSession, XltTokenConfig, XltTokenConfig as XltTokenConfig$1, XltTokenConfigInput, XltTokenContext, XltTokenStore, XltTokenStore as XltTokenStore$1, createExpressContext, createMockHttpContext, createXltToken, matchPermission, setStpLogic, setStpPermLogic } from "@xlt-token/core";
+import { AuthResult, CreateOptions, DEFAULT_XLT_TOKEN_CONFIG, DeviceInfo, HttpContext, MemoryStore, NotLoginType, NotLoginType as NotLoginType$1, StpInterface, StpInterface as StpInterface$1, StpLogic, StpLogic as StpLogic$1, StpPermLogic, StpPermLogic as StpPermLogic$1, StpUtil, TokenStrategy, TokenStrategy as TokenStrategy$1, UuidStrategy, XLT_EVENT_SINK, XLT_STP_INTERFACE, XLT_TOKEN_CONFIG, XLT_TOKEN_STORE, XLT_TOKEN_STRATEGY, XltAuditEvent, XltEventSink, XltEventSink as XltEventSink$1, XltMode, XltMode as XltMode$1, XltSession, XltTokenConfig, XltTokenConfig as XltTokenConfig$1, XltTokenConfigInput, XltTokenContext, XltTokenStore, XltTokenStore as XltTokenStore$1, createExpressContext, createMockHttpContext, createXltToken, matchPermission, setStpLogic, setStpPermLogic } from "@xlt-token/core";
+import { IORedisClient, IORedisStore as IORedisStore$1, RedisClient, RedisStore as RedisStore$1 } from "@xlt-token/store-redis";
+import { JwtAlgorithm, JwtAudience, JwtKey, JwtKeyInput, JwtStrategy, JwtStrategyConfig, JwtStrategyConfigInput, XltJwtPayload, createJwtStrategyConfig } from "@xlt-token/jwt";
 import { Reflector } from "@nestjs/core";
 
 //#region src/xlt-token.module.d.ts
@@ -13,13 +15,15 @@ interface XltTokenModuleOptions {
   };
   strategy?: {
     useClass: new (...args: any[]) => TokenStrategy$1;
+  } | {
+    useValue: TokenStrategy$1;
   };
   isGlobal?: boolean;
   providers?: Provider[];
   stpInterface?: new (...args: any[]) => StpInterface$1;
-  hooks?: XltHooks$1;
+  eventSink?: XltEventSink$1;
 }
-interface XltTokenModuleAsyncOptions extends Pick<ModuleMetadata, 'imports'> {
+interface XltTokenModuleAsyncOptions extends Pick<ModuleMetadata, "imports"> {
   useFactory: (...args: any[]) => Promise<XltTokenModuleOptions> | XltTokenModuleOptions;
   inject?: any[];
   store?: {
@@ -29,11 +33,13 @@ interface XltTokenModuleAsyncOptions extends Pick<ModuleMetadata, 'imports'> {
   };
   strategy?: {
     useClass: new (...args: any[]) => TokenStrategy$1;
+  } | {
+    useValue: TokenStrategy$1;
   };
   isGlobal?: boolean;
   providers?: Provider[];
   stpInterface?: new (...args: any[]) => StpInterface$1;
-  hooks?: XltHooks$1;
+  eventSink?: XltEventSink$1;
 }
 declare class XltTokenModule {
   private static readonly stpLogicProvider;
@@ -60,38 +66,27 @@ declare class XltTokenModule {
   private static createStoreProvider;
   private static createStrategyProvider;
   private static createStpInterfaceProvider;
-  private static createHooksProvider;
+  private static createEventSinkProvider;
 }
 //#endregion
 //#region src/store/redis-store.d.ts
 declare const XLT_REDIS_CLIENT = "XLT_REDIS_CLIENT";
-declare class RedisStore implements XltTokenStore$1 {
-  private readonly redisClient;
-  constructor(redisClient: any);
-  get(key: string): Promise<string | null>;
-  set(key: string, value: string, timeoutSec: number): Promise<void>;
-  delete(key: string): Promise<void>;
-  update(key: string, value: string): Promise<void>;
-  has(key: string): Promise<boolean>;
-  updateTimeout(key: string, timeoutSec: number): Promise<void>;
-  getTimeout(key: string): Promise<number>;
-  keys(pattern: string): Promise<string[]>;
+/**
+ * @deprecated Import `RedisStore` from `@xlt-token/store-redis` and provide it
+ * through `store.useValue` for new applications.
+ */
+declare class RedisStore extends RedisStore$1 {
+  constructor(redisClient: RedisClient);
 }
 //#endregion
-//#region src/token/jwt-strategy.d.ts
-type XltJwtPayload = Record<string, any> & {
-  sub: string;
-  jti: string;
-};
-declare class JwtStrategy implements TokenStrategy$1<XltJwtPayload> {
-  private readonly config;
-  constructor(config: XltTokenConfig$1);
-  private ensureJwtConfig;
-  createToken(loginId: string, config: XltTokenConfig$1, options?: {
-    timeout?: DurationInput;
-  }): string;
-  generateToken(payload: any): string;
-  verifyToken(token: string): XltJwtPayload;
+//#region src/store/ioredis-store.d.ts
+declare const XLT_IOREDIS_CLIENT = "XLT_IOREDIS_CLIENT";
+/**
+ * @deprecated Import `IORedisStore` from `@xlt-token/store-redis` and provide it
+ * through `store.useValue` for new applications.
+ */
+declare class IORedisStore extends IORedisStore$1 {
+  constructor(redisClient: IORedisClient);
 }
 //#endregion
 //#region src/decorators/xlt-check-login.decorator.d.ts
@@ -191,6 +186,7 @@ declare class NotLoginException extends UnauthorizedException {
   readonly type: NotLoginType$1;
   readonly token: string | undefined;
   constructor(type: NotLoginType$1, token?: string);
+  private static codeForType;
   private static describeType;
 }
 //#endregion
@@ -214,5 +210,5 @@ declare class NotSafeException extends ForbiddenException {
   constructor(business: string);
 }
 //#endregion
-export { type AuthResult, type CreateOptions, DEFAULT_XLT_TOKEN_CONFIG, type DeviceInfo, type HttpContext, JwtStrategy, LoginId, MemoryStore, NotLoginException, NotLoginType, NotPermissionException, NotRoleException, NotSafeException, RedisStore, type StpInterface, StpLogic, StpPermLogic, StpUtil, type TokenStrategy, TokenValue, UuidStrategy, XLT_CHECK_SAFE_KEY, XLT_REDIS_CLIENT, XLT_STP_INTERFACE, XLT_TOKEN_CONFIG, XLT_TOKEN_HOOKS, XLT_TOKEN_STORE, XLT_TOKEN_STRATEGY, XltAbstractLoginGuard, XltCheckLogin, XltCheckPermission, XltCheckRole, XltCheckSafe, type XltHooks, XltIgnore, XltMode, XltSession, type XltTokenConfig, type XltTokenContext, XltTokenGuard, XltTokenModule, type XltTokenModuleAsyncOptions, type XltTokenModuleOptions, type XltTokenStore, createExpressContext, createMockHttpContext, createXltToken, matchPermission, setStpLogic, setStpPermLogic };
+export { type AuthResult, type CreateOptions, DEFAULT_XLT_TOKEN_CONFIG, type DeviceInfo, type HttpContext, IORedisStore, type JwtAlgorithm, type JwtAudience, type JwtKey, type JwtKeyInput, JwtStrategy, type JwtStrategyConfig, type JwtStrategyConfigInput, LoginId, MemoryStore, NotLoginException, NotLoginType, NotPermissionException, NotRoleException, NotSafeException, RedisStore, type StpInterface, StpLogic, StpPermLogic, StpUtil, type TokenStrategy, TokenValue, UuidStrategy, XLT_CHECK_SAFE_KEY, XLT_EVENT_SINK, XLT_IOREDIS_CLIENT, XLT_REDIS_CLIENT, XLT_STP_INTERFACE, XLT_TOKEN_CONFIG, XLT_TOKEN_STORE, XLT_TOKEN_STRATEGY, XltAbstractLoginGuard, type XltAuditEvent, XltCheckLogin, XltCheckPermission, XltCheckRole, XltCheckSafe, type XltEventSink, XltIgnore, type XltJwtPayload, XltMode, XltSession, type XltTokenConfig, type XltTokenContext, XltTokenGuard, XltTokenModule, type XltTokenModuleAsyncOptions, type XltTokenModuleOptions, type XltTokenStore, createExpressContext, createJwtStrategyConfig, createMockHttpContext, createXltToken, matchPermission, setStpLogic, setStpPermLogic };
 //# sourceMappingURL=index.d.mts.map

package/dist/index.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.mts","names":[],"sources":["../src/xlt-token.module.ts","../src/store/redis-store.ts","../src/token/jwt-strategy.ts","../src/decorators/xlt-check-login.decorator.ts","../src/decorators/xlt-ignore.decorator.ts","../src/decorators/login-id.decorator.ts","../src/decorators/token-value.decorator.ts","../src/decorators/xlt-check-permission.decorator.ts","../src/decorators/xlt-check-role.decorator.ts","../src/decorators/xlt-check-safe.decorator.ts","../src/guards/xlt-token.guard.ts","../src/guards/xlt-abstract-login.guard.ts","../src/exceptions/not-login.exception.ts","../src/exceptions/not-permission.exception.ts","../src/exceptions/not-role.exception.ts","../src/exceptions/not-safe.exception.ts"],"mappings":";;;;;;UAmBiB,qBAAA;EACb,MAAA,GAAS,OAAA,CAAQ,mBAAA;EACjB,KAAA;IAAU,QAAA,UAAkB,IAAA,YAAgB,eAAA;EAAA;IAAoB,QAAA,EAAU,eAAA;EAAA;EAC1E,QAAA;IAAa,QAAA,UAAkB,IAAA,YAAgB,eAAA;EAAA;EAC/C,QAAA;EACA,SAAA,GAAY,QAAA;EACZ,YAAA,WAAuB,IAAA,YAAgB,cAAA;EACvC,KAAA,GAAQ,UAAA;AAAA;AAAA,UAGK,0BAAA,SAAmC,IAAA,CAAK,cAAA;EACrD,UAAA,MAAgB,IAAA,YAAgB,OAAA,CAAQ,qBAAA,IAAyB,qBAAA;EACjE,MAAA;EACA,KAAA;IAAU,QAAA,UAAkB,IAAA,YAAgB,eAAA;EAAA;IAAoB,QAAA,EAAU,eAAA;EAAA;EAC1E,QAAA;IAAa,QAAA,UAAkB,IAAA,YAAgB,eAAA;EAAA;EAC/C,QAAA;EACA,SAAA,GAAY,QAAA;EACZ,YAAA,WAAuB,IAAA,YAAgB,cAAA;EACvC,KAAA,GAAQ,UAAA;AAAA;AAAA,cAIC,cAAA;EAAA,wBACe,gBAAA;EAAA,wBAUA,oBAAA;EAAA,wBASA,YAAA;EAAA,wBASA,aAAA;EAAA,OAEjB,OAAA,CAAQ,OAAA,GAAS,qBAAA;;;;;;SAqBjB,YAAA,CAAa,OAAA,EAAS,0BAAA;;;;;sCAkBoB,OAAA,CAAA,gBAAA;;;;;;iBAoBlC,mBAAA;EAAA,eASA,sBAAA;EAAA,eAQA,0BAAA;EAAA,eAiBA,mBAAA;AAAA;;;cCjKL,gBAAA;AAAA,cAIA,UAAA,YAAsB,eAAA;EAAA,iBAIf,WAAA;cAAA,WAAA;EAMb,GAAA,CAAI,GAAA,WAAY,OAAA;EAKhB,GAAA,CAAI,GAAA,UAAY,KAAA,UAAc,UAAA,WAAmB,OAAA;EASjD,MAAA,CAAO,GAAA,WAAY,OAAA;EAKnB,MAAA,CAAO,GAAA,UAAY,KAAA,WAAc,OAAA;EAQjC,GAAA,CAAI,GAAA,WAAY,OAAA;EAMhB,aAAA,CAAc,GAAA,UAAY,UAAA,WAAmB,OAAA;EAe7C,UAAA,CAAW,GAAA,WAAY,OAAA;EAUvB,IAAA,CAAK,OAAA,WAAkB,OAAA;AAAA;;;KClEnB,aAAA,GAAgB,MAAA;EAAwB,GAAA;EAAa,GAAA;AAAA;AAAA,cAmBpD,WAAA,YAAuB,eAAA,CAAc,aAAA;EAAA,iBAEH,MAAA;cAAA,MAAA,EAAQ,gBAAA;EAAA,QAG7C,eAAA;EAWR,WAAA,CAAY,OAAA,UAAiB,MAAA,EAAQ,gBAAA,EAAgB,OAAA;IAAY,OAAA,GAAU,aAAA;EAAA;EAkB3E,aAAA,CAAc,OAAA;EAMd,WAAA,CAAY,KAAA,WAAgB,aAAA;AAAA;;;;;;;cC3DjB,aAAA,QAA4D,eAAA,CAA/C,eAAA;;;cCLb,SAAA,QAAmD,eAAA,CAA1C,eAAA;;;;;;;cCGT,OAAA,MAAO,WAAA,gBAAA,kBAAA;;;;;;;cCCP,UAAA,MAAU,WAAA,YAAA,kBAAA;;;;;;;;ANUvB;;cORa,kBAAA,GAAsB,WAAA,qBAAgC,OAAA;EAAY,IAAA,EAAM,SAAA;AAAA,MAAO,eAAA,CAAG,eAAA;;;;;;;;APQ/F;;cQRa,YAAA,GAAgB,KAAA,qBAA0B,OAAA;EAAY,IAAA,EAAM,SAAA;AAAA,MAAO,eAAA,CAAG,eAAA;;;cCTtE,kBAAA;AAAA,cAEA,YAAA,GAAgB,QAAA,aAE5B,eAAA,CAF4C,eAAA;;;cCehC,aAAA,YAAyB,WAAA;EAAA,iBAEjB,SAAA;EAAA,iBAC0B,MAAA;EAAA,iBAC1B,QAAA;EAAA,iBACY,YAAA;cAHZ,SAAA,EAAW,SAAA,EACe,MAAA,EAAQ,gBAAA,EAClC,QAAA,EAAU,UAAA,EACE,YAAA,GAAe,cAAA;EAIxC,WAAA,CAAY,OAAA,EAAS,gBAAA,GAAmB,OAAA;EAAA,QA2CtC,aAAA;EAAA,QAiBA,WAAA;AAAA;;;uBCzEY,qBAAA,YAAiC,WAAA;EAAA,mBAEhC,SAAA,EAAW,SAAA;EAAA,mBACe,MAAA,EAAQ,gBAAA;EAAA,mBAClC,QAAA,EAAU,UAAA;EAAA,UAHtB,WAAA,CACY,SAAA,EAAW,SAAA,EACe,MAAA,EAAQ,gBAAA,EAClC,QAAA,EAAU,UAAA;EAGzB,WAAA,CAAY,GAAA,EAAK,gBAAA,GAAmB,OAAA;EAAA,UAuBhC,aAAA,CAAc,GAAA,EAAK,gBAAA;EAAA,UAQnB,aAAA,CAAA,CACR,MAAA;IACE,EAAA;IACA,OAAA;IACA,KAAA;IACA,MAAA,GAAS,cAAA;EAAA,GAEX,OAAA,eACQ,OAAA;EAAA,UAEA,UAAA,CAAA,CACR,MAAA;IACE,EAAA;IACA,OAAA;IACA,KAAA;IACA,MAAA,GAAS,cAAA;EAAA,GAEX,OAAA,eACQ,OAAA;EAAA,UAEA,kBAAA,CAAA,CACR,MAAA;IACE,EAAA;IACA,OAAA;IACA,KAAA;IACA,MAAA,GAAS,cAAA;EAAA,GAEX,OAAA,eACQ,OAAA;AAAA;;;cC9EC,iBAAA,SAA0B,qBAAA;EAAA,SACrB,IAAA,EAAM,cAAA;EAAA,SACN,KAAA;cAEJ,IAAA,EAAM,cAAA,EAAc,KAAA;EAAA,eAUjB,YAAA;AAAA;;;cCdJ,sBAAA,SAA+B,kBAAA;EAAA,SAC1B,UAAA;EAAA,SACA,IAAA,EAAM,SAAA;cAEV,UAAA,qBAA+B,IAAA,EAAM,SAAA;AAAA;;;cCJtC,gBAAA,SAAyB,kBAAA;EAAA,SACpB,IAAA;EAAA,SACA,IAAA,EAAM,SAAA;cAEV,IAAA,qBAAyB,IAAA,EAAM,SAAA;AAAA;;;cCLhC,gBAAA,SAAyB,kBAAA;EAAA,SAC3B,QAAA;cAGG,QAAA;AAAA"}
+{"version":3,"file":"index.d.mts","names":[],"sources":["../src/xlt-token.module.ts","../src/store/redis-store.ts","../src/store/ioredis-store.ts","../src/decorators/xlt-check-login.decorator.ts","../src/decorators/xlt-ignore.decorator.ts","../src/decorators/login-id.decorator.ts","../src/decorators/token-value.decorator.ts","../src/decorators/xlt-check-permission.decorator.ts","../src/decorators/xlt-check-role.decorator.ts","../src/decorators/xlt-check-safe.decorator.ts","../src/guards/xlt-token.guard.ts","../src/guards/xlt-abstract-login.guard.ts","../src/exceptions/not-login.exception.ts","../src/exceptions/not-permission.exception.ts","../src/exceptions/not-role.exception.ts","../src/exceptions/not-safe.exception.ts"],"mappings":";;;;;;;;UAyBiB,qBAAA;EACf,MAAA,GAAS,OAAA,CAAQ,mBAAA;EACjB,KAAA;IAAU,QAAA,UAAkB,IAAA,YAAgB,eAAA;EAAA;IAAoB,QAAA,EAAU,eAAA;EAAA;EAC1E,QAAA;IAAa,QAAA,UAAkB,IAAA,YAAgB,eAAA;EAAA;IAAoB,QAAA,EAAU,eAAA;EAAA;EAC7E,QAAA;EACA,SAAA,GAAY,QAAA;EACZ,YAAA,WAAuB,IAAA,YAAgB,cAAA;EACvC,SAAA,GAAY,cAAA;AAAA;AAAA,UAGG,0BAAA,SAAmC,IAAA,CAAK,cAAA;EACvD,UAAA,MAAgB,IAAA,YAAgB,OAAA,CAAQ,qBAAA,IAAyB,qBAAA;EACjE,MAAA;EACA,KAAA;IAAU,QAAA,UAAkB,IAAA,YAAgB,eAAA;EAAA;IAAoB,QAAA,EAAU,eAAA;EAAA;EAC1E,QAAA;IAAa,QAAA,UAAkB,IAAA,YAAgB,eAAA;EAAA;IAAoB,QAAA,EAAU,eAAA;EAAA;EAC7E,QAAA;EACA,SAAA,GAAY,QAAA;EACZ,YAAA,WAAuB,IAAA,YAAgB,cAAA;EACvC,SAAA,GAAY,cAAA;AAAA;AAAA,cAID,cAAA;EAAA,wBACa,gBAAA;EAAA,wBAUA,oBAAA;EAAA,wBAMA,YAAA;EAAA,wBASA,aAAA;EAAA,OAQjB,OAAA,CAAQ,OAAA,GAAS,qBAAA;;;;;;SA4BjB,YAAA,CAAa,OAAA,EAAS,0BAAA;;;;;sCAkBY,OAAA,CAAA,gBAAA;;;;;;iBAoB1B,mBAAA;EAAA,eAOA,sBAAA;EAAA,eAOA,0BAAA;EAAA,eAiBA,uBAAA;AAAA;;;cC/KJ,gBAAA;;;;;cAOA,UAAA,SAAmB,YAAA;cAG5B,WAAA,EAAa,WAAA;AAAA;;;cCVJ,kBAAA;;;;;cAOA,YAAA,SAAqB,cAAA;cAG9B,WAAA,EAAa,aAAA;AAAA;;;;;;;cCJJ,aAAA,QAA4D,eAAA,CAA/C,eAAA;;;cCJb,SAAA,QAAmD,eAAA,CAA1C,eAAA;;;;;;;cCGT,OAAA,MAAO,WAAA,gBAAA,kBAAA;;;;;;;cCAP,UAAA,MAAU,WAAA,YAAA,kBAAA;;;;;;;;;;cCEV,kBAAA,GAAsB,WAAA,qBAAgC,OAAA;EAAY,IAAA,EAAM,SAAA;AAAA,MAAO,eAAA,CAAE,eAAA;;;;;;;;;;cCAjF,YAAA,GAAgB,KAAA,qBAA0B,OAAA;EAAY,IAAA,EAAM,SAAA;AAAA,MAAO,eAAA,CAAE,eAAA;;;cCRrE,kBAAA;AAAA,cAEA,YAAA,GAAgB,QAAA,aAE5B,eAAA,CAF4C,eAAA;;;cCehC,aAAA,YAAyB,WAAA;EAAA,iBAEjB,SAAA;EAAA,iBAC0B,MAAA;EAAA,iBAC1B,QAAA;EAAA,iBACY,YAAA;cAHZ,SAAA,EAAW,SAAA,EACe,MAAA,EAAQ,gBAAA,EAClC,QAAA,EAAU,UAAA,EACE,YAAA,GAAe,cAAA;EAGxC,WAAA,CAAY,OAAA,EAAS,gBAAA,GAAmB,OAAA;EAAA,QA+CtC,aAAA;EAAA,QAiBA,WAAA;AAAA;;;uBC5EY,qBAAA,YAAiC,WAAA;EAAA,mBAEhC,SAAA,EAAW,SAAA;EAAA,mBACe,MAAA,EAAQ,gBAAA;EAAA,mBAClC,QAAA,EAAU,UAAA;EAAA,UAHtB,WAAA,CACY,SAAA,EAAW,SAAA,EACe,MAAA,EAAQ,gBAAA,EAClC,QAAA,EAAU,UAAA;EAGzB,WAAA,CAAY,GAAA,EAAK,gBAAA,GAAmB,OAAA;EAAA,UAuBhC,aAAA,CAAc,GAAA,EAAK,gBAAA;EAAA,UAgBnB,aAAA,CAAA,CACR,MAAA;IACE,EAAA;IACA,OAAA;IACA,KAAA;IACA,MAAA,GAAS,cAAA;EAAA,GAEX,OAAA,eACQ,OAAA;EAAA,UAEA,UAAA,CAAA,CACR,MAAA;IACE,EAAA;IACA,OAAA;IACA,KAAA;IACA,MAAA,GAAS,cAAA;EAAA,GAEX,OAAA,eACQ,OAAA;EAAA,UAEA,kBAAA,CAAA,CACR,MAAA;IACE,EAAA;IACA,OAAA;IACA,KAAA;IACA,MAAA,GAAS,cAAA;EAAA,GAEX,OAAA,eACQ,OAAA;AAAA;;;cCtFC,iBAAA,SAA0B,qBAAA;EAAA,SACrB,IAAA,EAAM,cAAA;EAAA,SACN,KAAA;cAEJ,IAAA,EAAM,cAAA,EAAc,KAAA;EAAA,eAWjB,WAAA;EAAA,eAYA,YAAA;AAAA;;;cC3BJ,sBAAA,SAA+B,kBAAA;EAAA,SAC1B,UAAA;EAAA,SACA,IAAA,EAAM,SAAA;cAEV,UAAA,qBAA+B,IAAA,EAAM,SAAA;AAAA;;;cCJtC,gBAAA,SAAyB,kBAAA;EAAA,SACpB,IAAA;EAAA,SACA,IAAA,EAAM,SAAA;cAEV,IAAA,qBAAyB,IAAA,EAAM,SAAA;AAAA;;;cCLhC,gBAAA,SAAyB,kBAAA;EAAA,SAC3B,QAAA;cAEG,QAAA;AAAA"}

package/dist/index.mjs

@@ -1,7 +1,7 @@
-import { createRequire } from "node:module";
 import { ForbiddenException, Inject, Injectable, Module, Optional, SetMetadata, UnauthorizedException, createParamDecorator } from "@nestjs/common";
-import { DEFAULT_XLT_TOKEN_CONFIG, MemoryStore, MemoryStore as MemoryStore$1, NotLoginException as NotLoginException$1, NotLoginType, NotLoginType as NotLoginType$1, NotPermissionException as NotPermissionException$1, NotRoleException as NotRoleException$1, NotSafeException as NotSafeException$1, StpLogic, StpLogic as StpLogic$1, StpPermLogic, StpPermLogic as StpPermLogic$1, StpUtil, UuidStrategy, UuidStrategy as UuidStrategy$1, XLT_CHECK_LOGIN_KEY, XLT_IGNORE_KEY, XLT_PERMISSION_KEY, XLT_ROLE_KEY, XLT_STP_INTERFACE, XLT_STP_INTERFACE as XLT_STP_INTERFACE$1, XLT_TOKEN_CONFIG, XLT_TOKEN_CONFIG as XLT_TOKEN_CONFIG$1, XLT_TOKEN_HOOKS, XLT_TOKEN_HOOKS as XLT_TOKEN_HOOKS$1, XLT_TOKEN_STORE, XLT_TOKEN_STORE as XLT_TOKEN_STORE$1, XLT_TOKEN_STRATEGY, XLT_TOKEN_STRATEGY as XLT_TOKEN_STRATEGY$1, XltMode, XltMode as XltMode$1, XltSession, createExpressContext, createExpressContext as createExpressContext$1, createMockHttpContext, createXltToken, matchPermission, normalizeXltTokenConfig, setStpLogic, setStpLogic as setStpLogic$1, setStpPermLogic, setStpPermLogic as setStpPermLogic$1 } from "@xlt-token/core";
-import { randomUUID } from "node:crypto";
+import { DEFAULT_XLT_TOKEN_CONFIG, MemoryStore, MemoryStore as MemoryStore$1, NotLoginException as NotLoginException$1, NotLoginType, NotLoginType as NotLoginType$1, NotPermissionException as NotPermissionException$1, NotRoleException as NotRoleException$1, NotSafeException as NotSafeException$1, StpLogic, StpLogic as StpLogic$1, StpPermLogic, StpPermLogic as StpPermLogic$1, StpUtil, UuidStrategy, UuidStrategy as UuidStrategy$1, XLT_CHECK_LOGIN_KEY, XLT_EVENT_SINK, XLT_EVENT_SINK as XLT_EVENT_SINK$1, XLT_IGNORE_KEY, XLT_PERMISSION_KEY, XLT_ROLE_KEY, XLT_STP_INTERFACE, XLT_STP_INTERFACE as XLT_STP_INTERFACE$1, XLT_TOKEN_CONFIG, XLT_TOKEN_CONFIG as XLT_TOKEN_CONFIG$1, XLT_TOKEN_STORE, XLT_TOKEN_STORE as XLT_TOKEN_STORE$1, XLT_TOKEN_STRATEGY, XLT_TOKEN_STRATEGY as XLT_TOKEN_STRATEGY$1, XltMode, XltMode as XltMode$1, XltSession, createExpressContext, createExpressContext as createExpressContext$1, createMockHttpContext, createXltToken, matchPermission, normalizeXltTokenConfig, setStpLogic, setStpLogic as setStpLogic$1, setStpPermLogic, setStpPermLogic as setStpPermLogic$1 } from "@xlt-token/core";
+import { IORedisStore as IORedisStore$1, RedisStore as RedisStore$1 } from "@xlt-token/store-redis";
+import { JwtStrategy, createJwtStrategyConfig } from "@xlt-token/jwt";
 import { Reflector } from "@nestjs/core";
 
 //#region \0@oxc-project+runtime@0.112.0/helpers/decorate.js
@@ -22,12 +22,12 @@ let XltTokenModule = class XltTokenModule {
 	static {
 		this.stpLogicProvider = {
 			provide: StpLogic$1,
-			useFactory: (config, store, strategy, hooks) => new StpLogic$1(config, store, strategy, hooks),
+			useFactory: (config, store, strategy, eventSink) => new StpLogic$1(config, store, strategy, eventSink),
 			inject: [
 				XLT_TOKEN_CONFIG$1,
 				XLT_TOKEN_STORE$1,
 				XLT_TOKEN_STRATEGY$1,
-				XLT_TOKEN_HOOKS$1
+				XLT_EVENT_SINK$1
 			]
 		};
 	}
@@ -74,7 +74,7 @@ let XltTokenModule = class XltTokenModule {
 				_XltTokenModule.createStoreProvider(store),
 				_XltTokenModule.createStrategyProvider(strategy),
 				_XltTokenModule.createStpInterfaceProvider(stpInterface),
-				_XltTokenModule.createHooksProvider(options.hooks),
+				_XltTokenModule.createEventSinkProvider(options.eventSink),
 				_XltTokenModule.stpLogicProvider,
 				_XltTokenModule.stpPermLogicProvider,
 				_XltTokenModule.initProvider,
@@ -101,7 +101,7 @@ let XltTokenModule = class XltTokenModule {
 				_XltTokenModule.createStoreProvider(store),
 				_XltTokenModule.createStrategyProvider(strategy),
 				_XltTokenModule.createStpInterfaceProvider(stpInterface),
-				_XltTokenModule.createHooksProvider(options.hooks),
+				_XltTokenModule.createEventSinkProvider(options.eventSink),
 				_XltTokenModule.stpLogicProvider,
 				_XltTokenModule.stpPermLogicProvider,
 				_XltTokenModule.initProvider,
@@ -125,12 +125,16 @@ let XltTokenModule = class XltTokenModule {
 		};
 	}
 	static createStrategyProvider(strategy) {
-		return strategy?.useClass ? {
+		if (!strategy) return {
+			provide: XLT_TOKEN_STRATEGY$1,
+			useClass: UuidStrategy$1
+		};
+		return "useClass" in strategy ? {
 			provide: XLT_TOKEN_STRATEGY$1,
 			useClass: strategy.useClass
 		} : {
 			provide: XLT_TOKEN_STRATEGY$1,
-			useClass: UuidStrategy$1
+			useValue: strategy.useValue
 		};
 	}
 	static createStpInterfaceProvider(stpInterface) {
@@ -150,10 +154,10 @@ let XltTokenModule = class XltTokenModule {
 			}
 		};
 	}
-	static createHooksProvider(hooks) {
+	static createEventSinkProvider(eventSink) {
 		return {
-			provide: XLT_TOKEN_HOOKS$1,
-			useValue: hooks ?? {}
+			provide: XLT_EVENT_SINK$1,
+			useValue: eventSink ?? {}
 		};
 	}
 };
@@ -176,49 +180,9 @@ function __decorateParam(paramIndex, decorator) {
 //#endregion
 //#region src/store/redis-store.ts
 const XLT_REDIS_CLIENT = "XLT_REDIS_CLIENT";
-let RedisStore = class RedisStore {
+let RedisStore = class RedisStore extends RedisStore$1 {
 	constructor(redisClient) {
-		this.redisClient = redisClient;
-	}
-	async get(key) {
-		return this.redisClient.get(key);
-	}
-	async set(key, value, timeoutSec) {
-		if (timeoutSec === -1) await this.redisClient.set(key, value);
-		else await this.redisClient.set(key, value, { EX: timeoutSec });
-	}
-	async delete(key) {
-		await this.redisClient.del(key);
-	}
-	async update(key, value) {
-		if (await this.redisClient.set(key, value, {
-			XX: true,
-			KEEPTTL: true
-		}) === null) throw new Error(`Key not found: ${key}`);
-	}
-	async has(key) {
-		return await this.redisClient.exists(key) === 1;
-	}
-	async updateTimeout(key, timeoutSec) {
-		if (!await this.redisClient.exists(key)) throw new Error(`Key not found: ${key}`);
-		if (timeoutSec === -1) await this.redisClient.persist(key);
-		else await this.redisClient.expire(key, timeoutSec);
-	}
-	async getTimeout(key) {
-		return await this.redisClient.ttl(key);
-	}
-	async keys(pattern) {
-		const result = [];
-		let cursor = "0";
-		do {
-			const reply = await this.redisClient.scan(cursor, {
-				MATCH: pattern,
-				COUNT: 100
-			});
-			cursor = String(reply.cursor);
-			result.push(...reply.keys);
-		} while (cursor !== "0");
-		return result;
+		super(redisClient);
 	}
 };
 RedisStore = __decorate([
@@ -228,57 +192,18 @@ RedisStore = __decorate([
 ], RedisStore);
 
 //#endregion
-//#region src/token/jwt-strategy.ts
-const require = createRequire(import.meta.url);
-let jsonwebtoken;
-function getJsonwebtoken() {
-	try {
-		jsonwebtoken ??= require("jsonwebtoken");
-		return jsonwebtoken;
-	} catch (error) {
-		if (error.code === "MODULE_NOT_FOUND") throw new Error("JwtStrategy requires the optional peer dependency \"jsonwebtoken\". Install it in your application with \"pnpm add jsonwebtoken\".");
-		throw error;
-	}
-}
-let JwtStrategy = class JwtStrategy {
-	constructor(config) {
-		this.config = config;
-	}
-	ensureJwtConfig(config) {
-		const jwt = (config ?? this.config).jwt;
-		if (!jwt || !jwt.secret) throw new Error("JwtStrategy requires jwt config with a secret. Provide { jwt: { secret: \"your-secret\" } } in the module config.");
-		return jwt;
-	}
-	createToken(loginId, config, options) {
-		const { sign } = getJsonwebtoken();
-		const jwt = this.ensureJwtConfig(config);
-		const jti = randomUUID();
-		const resolvedTimeout = options?.timeout ?? config.timeout;
-		const hasExpiry = typeof resolvedTimeout === "number" ? resolvedTimeout > 0 : true;
-		return sign({
-			sub: loginId,
-			jti
-		}, jwt.secret, {
-			algorithm: jwt.algorithm ?? "HS256",
-			...jwt.issuer && { issuer: jwt.issuer },
-			...jwt.audience && { audience: jwt.audience },
-			...hasExpiry && { expiresIn: resolvedTimeout }
-		});
-	}
-	generateToken(payload) {
-		const { sign } = getJsonwebtoken();
-		return sign(payload, this.ensureJwtConfig().secret);
-	}
-	verifyToken(token) {
-		const { verify } = getJsonwebtoken();
-		return verify(token, this.ensureJwtConfig().secret);
+//#region src/store/ioredis-store.ts
+const XLT_IOREDIS_CLIENT = "XLT_IOREDIS_CLIENT";
+let IORedisStore = class IORedisStore extends IORedisStore$1 {
+	constructor(redisClient) {
+		super(redisClient);
 	}
 };
-JwtStrategy = __decorate([
+IORedisStore = __decorate([
 	Injectable(),
-	__decorateParam(0, Inject(XLT_TOKEN_CONFIG$1)),
+	__decorateParam(0, Inject(XLT_IOREDIS_CLIENT)),
 	__decorateMetadata("design:paramtypes", [Object])
-], JwtStrategy);
+], IORedisStore);
 
 //#endregion
 //#region src/decorators/xlt-check-login.decorator.ts
@@ -357,12 +282,23 @@ var NotLoginException = class NotLoginException extends UnauthorizedException {
 	constructor(type, token) {
 		super({
 			statusCode: 401,
+			code: NotLoginException.codeForType(type),
 			type,
 			message: NotLoginException.describeType(type)
 		});
 		this.type = type;
 		this.token = token;
 	}
+	static codeForType(type) {
+		return {
+			[NotLoginType$1.NOT_TOKEN]: "TOKEN_MISSING",
+			[NotLoginType$1.INVALID_TOKEN]: "TOKEN_INVALID",
+			[NotLoginType$1.TOKEN_TIMEOUT]: "TOKEN_TIMEOUT",
+			[NotLoginType$1.TOKEN_FREEZE]: "TOKEN_FREEZE",
+			[NotLoginType$1.BE_REPLACED]: "TOKEN_REPLACED",
+			[NotLoginType$1.KICK_OUT]: "TOKEN_KICKED_OUT"
+		}[type] ?? "TOKEN_INVALID";
+	}
 	static describeType(type) {
 		return {
 			[NotLoginType$1.NOT_TOKEN]: "未提供 Token",
@@ -381,7 +317,9 @@ var NotPermissionException = class extends ForbiddenException {
 	constructor(permission, mode) {
 		super({
 			statusCode: 403,
-			type: "NOT_PERMISSION",
+			code: "PERMISSION_DENIED",
+			permission,
+			mode,
 			message: `缺少权限: ${Array.isArray(permission) ? permission.join(", ") : permission}`
 		});
 		this.permission = permission;
@@ -395,7 +333,9 @@ var NotRoleException = class extends ForbiddenException {
 	constructor(role, mode) {
 		super({
 			statusCode: 403,
-			type: "NOT_ROLE",
+			code: "ROLE_DENIED",
+			role,
+			mode,
 			message: `缺少角色: ${Array.isArray(role) ? role.join(", ") : role}`
 		});
 		this.role = role;
@@ -409,7 +349,8 @@ var NotSafeException = class extends ForbiddenException {
 	constructor(business) {
 		super({
 			statusCode: 403,
-			type: "NOT_SAFE",
+			code: "SAFE_REQUIRED",
+			business,
 			message: `二级认证未开启：${business}`
 		});
 		this.business = business;
@@ -560,5 +501,5 @@ XltAbstractLoginGuard = __decorate([
 ], XltAbstractLoginGuard);
 
 //#endregion
-export { DEFAULT_XLT_TOKEN_CONFIG, JwtStrategy, LoginId, MemoryStore, NotLoginException, NotLoginType, NotPermissionException, NotRoleException, NotSafeException, RedisStore, StpLogic, StpPermLogic, StpUtil, TokenValue, UuidStrategy, XLT_CHECK_SAFE_KEY, XLT_REDIS_CLIENT, XLT_STP_INTERFACE, XLT_TOKEN_CONFIG, XLT_TOKEN_HOOKS, XLT_TOKEN_STORE, XLT_TOKEN_STRATEGY, XltAbstractLoginGuard, XltCheckLogin, XltCheckPermission, XltCheckRole, XltCheckSafe, XltIgnore, XltMode, XltSession, XltTokenGuard, XltTokenModule, createExpressContext, createMockHttpContext, createXltToken, matchPermission, setStpLogic, setStpPermLogic };
+export { DEFAULT_XLT_TOKEN_CONFIG, IORedisStore, JwtStrategy, LoginId, MemoryStore, NotLoginException, NotLoginType, NotPermissionException, NotRoleException, NotSafeException, RedisStore, StpLogic, StpPermLogic, StpUtil, TokenValue, UuidStrategy, XLT_CHECK_SAFE_KEY, XLT_EVENT_SINK, XLT_IOREDIS_CLIENT, XLT_REDIS_CLIENT, XLT_STP_INTERFACE, XLT_TOKEN_CONFIG, XLT_TOKEN_STORE, XLT_TOKEN_STRATEGY, XltAbstractLoginGuard, XltCheckLogin, XltCheckPermission, XltCheckRole, XltCheckSafe, XltIgnore, XltMode, XltSession, XltTokenGuard, XltTokenModule, createExpressContext, createJwtStrategyConfig, createMockHttpContext, createXltToken, matchPermission, setStpLogic, setStpPermLogic };
 //# sourceMappingURL=index.mjs.map

package/dist/index.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.mjs","names":["StpLogic","XLT_TOKEN_CONFIG","XLT_TOKEN_STORE","XLT_TOKEN_STRATEGY","XLT_TOKEN_HOOKS","StpPermLogic","XLT_STP_INTERFACE","MemoryStore","UuidStrategy","XLT_TOKEN_CONFIG","XltMode","XltMode","NotLoginType","createExpressContext","CoreNotLoginException","CoreNotPermissionException","CoreNotRoleException","CoreNotSafeException","XLT_TOKEN_CONFIG","CoreNotLoginException","XLT_TOKEN_CONFIG"],"sources":["../src/xlt-token.module.ts","../src/store/redis-store.ts","../src/token/jwt-strategy.ts","../src/decorators/xlt-check-login.decorator.ts","../src/decorators/xlt-ignore.decorator.ts","../src/decorators/login-id.decorator.ts","../src/decorators/token-value.decorator.ts","../src/decorators/xlt-check-permission.decorator.ts","../src/decorators/xlt-check-role.decorator.ts","../src/decorators/xlt-check-safe.decorator.ts","../src/exceptions/not-login.exception.ts","../src/exceptions/not-permission.exception.ts","../src/exceptions/not-role.exception.ts","../src/exceptions/not-safe.exception.ts","../src/http/nest-bridge.ts","../src/guards/xlt-token.guard.ts","../src/guards/xlt-abstract-login.guard.ts"],"sourcesContent":["import type { ModuleMetadata, Provider } from '@nestjs/common';\nimport { Module } from '@nestjs/common';\nimport type { StpInterface, TokenStrategy, XltHooks, XltTokenConfig, XltTokenConfigInput, XltTokenStore, } from '@xlt-token/core';\nimport {\n    DEFAULT_XLT_TOKEN_CONFIG,\n    MemoryStore,\n    setStpLogic,\n    setStpPermLogic,\n    StpLogic,\n    StpPermLogic,\n    UuidStrategy,\n    XLT_STP_INTERFACE,\n    XLT_TOKEN_CONFIG,\n    XLT_TOKEN_HOOKS,\n    XLT_TOKEN_STORE,\n    XLT_TOKEN_STRATEGY,\n    normalizeXltTokenConfig\n} from '@xlt-token/core';\n\nexport interface XltTokenModuleOptions {\n    config?: Partial<XltTokenConfigInput>;\n    store?: { useClass: new (...args: any[]) => XltTokenStore } | { useValue: XltTokenStore };\n    strategy?: { useClass: new (...args: any[]) => TokenStrategy };\n    isGlobal?: boolean;\n    providers?: Provider[];\n    stpInterface?: new (...args: any[]) => StpInterface;\n    hooks?: XltHooks;\n}\n\nexport interface XltTokenModuleAsyncOptions extends Pick<ModuleMetadata, 'imports'> {\n    useFactory: (...args: any[]) => Promise<XltTokenModuleOptions> | XltTokenModuleOptions;\n    inject?: any[];\n    store?: { useClass: new (...args: any[]) => XltTokenStore } | { useValue: XltTokenStore };\n    strategy?: { useClass: new (...args: any[]) => TokenStrategy };\n    isGlobal?: boolean;\n    providers?: Provider[];\n    stpInterface?: new (...args: any[]) => StpInterface;\n    hooks?: XltHooks;\n}\n\n@Module({})\nexport class XltTokenModule {\n    private static readonly stpLogicProvider: Provider = {\n        provide: StpLogic,\n        useFactory: (\n            config: XltTokenConfig,\n            store: XltTokenStore,\n            strategy: TokenStrategy,\n            hooks: XltHooks,\n        ) => new StpLogic(config, store, strategy, hooks),\n        inject: [ XLT_TOKEN_CONFIG, XLT_TOKEN_STORE, XLT_TOKEN_STRATEGY, XLT_TOKEN_HOOKS ],\n    };\n    private static readonly stpPermLogicProvider: Provider = {\n        provide: StpPermLogic,\n        useFactory: (\n            stpInterface: StpInterface,\n            store: XltTokenStore,\n            config: XltTokenConfig,\n        ) => new StpPermLogic(stpInterface, store, config),\n        inject: [ XLT_STP_INTERFACE, XLT_TOKEN_STORE, XLT_TOKEN_CONFIG ],\n    };\n    private static readonly initProvider: Provider = {\n        provide: 'XLT_TOKEN_INIT',\n        useFactory: (stpLogic: StpLogic, stpPermLogic: StpPermLogic) => {\n            setStpLogic(stpLogic);\n            setStpPermLogic(stpPermLogic);\n            return true;\n        },\n        inject: [ StpLogic, StpPermLogic ],\n    };\n    private static readonly moduleExports = [ XLT_TOKEN_CONFIG, XLT_TOKEN_STORE, XLT_TOKEN_STRATEGY, StpLogic, StpPermLogic ];\n\n    static forRoot(options: XltTokenModuleOptions = {}) {\n        const {config: userConfig, store, strategy, isGlobal = false, providers = [], stpInterface} = options;\n\n        return {\n            module: XltTokenModule,\n            providers: [\n                {provide: XLT_TOKEN_CONFIG, useValue: normalizeXltTokenConfig(userConfig)},\n                XltTokenModule.createStoreProvider(store),\n                XltTokenModule.createStrategyProvider(strategy),\n                XltTokenModule.createStpInterfaceProvider(stpInterface),\n                XltTokenModule.createHooksProvider(options.hooks),\n                XltTokenModule.stpLogicProvider,\n                XltTokenModule.stpPermLogicProvider,\n                XltTokenModule.initProvider,\n                ...providers,\n            ],\n            exports: XltTokenModule.moduleExports,\n            global: isGlobal,\n        };\n    }\n\n    static forRootAsync(options: XltTokenModuleAsyncOptions) {\n        const {\n            useFactory,\n            inject = [],\n            imports = [],\n            store,\n            strategy,\n            isGlobal = false,\n            providers = [],\n            stpInterface\n        } = options;\n\n        return {\n            module: XltTokenModule,\n            imports,\n            providers: [\n                {\n                    provide: XLT_TOKEN_CONFIG,\n                    useFactory: async (...args: any[]) => {\n                        const {config = {}} = await useFactory(...args);\n                        return normalizeXltTokenConfig(config)\n                    },\n                    inject,\n                },\n                XltTokenModule.createStoreProvider(store),\n                XltTokenModule.createStrategyProvider(strategy),\n                XltTokenModule.createStpInterfaceProvider(stpInterface),\n                XltTokenModule.createHooksProvider(options.hooks),\n                XltTokenModule.stpLogicProvider,\n                XltTokenModule.stpPermLogicProvider,\n                XltTokenModule.initProvider,\n                ...providers,\n            ],\n            exports: XltTokenModule.moduleExports,\n            global: isGlobal,\n        };\n    }\n\n    private static createStoreProvider(\n        store?: XltTokenModuleOptions['store'],\n    ): Provider {\n        if ( !store ) return {provide: XLT_TOKEN_STORE, useClass: MemoryStore};\n        return 'useClass' in store\n            ? {provide: XLT_TOKEN_STORE, useClass: store.useClass}\n            : {provide: XLT_TOKEN_STORE, useValue: store.useValue};\n    }\n\n    private static createStrategyProvider(\n        strategy?: XltTokenModuleOptions['strategy'],\n    ): Provider {\n        return strategy?.useClass\n            ? {provide: XLT_TOKEN_STRATEGY, useClass: strategy.useClass}\n            : {provide: XLT_TOKEN_STRATEGY, useClass: UuidStrategy};\n    }\n\n    private static createStpInterfaceProvider(\n        stpInterface?: new (...args: any[]) => StpInterface,\n    ): Provider {\n        if ( stpInterface ) return {provide: XLT_STP_INTERFACE, useClass: stpInterface};\n        return {\n            provide: XLT_STP_INTERFACE,\n            useValue: {\n                getPermissionList: () => {\n                    throw new Error('StpInterface not registered: getPermissionList');\n                },\n                getRoleList: () => {\n                    throw new Error('StpInterface not registered: getRoleList');\n                },\n            },\n        };\n    }\n\n    private static createHooksProvider(\n        hooks?: XltTokenModuleOptions['hooks'],\n    ): Provider {\n        return {provide: XLT_TOKEN_HOOKS, useValue: hooks ?? {}};\n    }\n}\n","import type { XltTokenStore } from '@xlt-token/core';\nimport { Inject, Injectable } from '@nestjs/common';\n\n\nexport  const XLT_REDIS_CLIENT = 'XLT_REDIS_CLIENT';\n\n\n@Injectable()\nexport  class RedisStore implements XltTokenStore {\n\n  constructor(\n    @Inject(XLT_REDIS_CLIENT)\n    private readonly redisClient: any,\n  ) {\n\n  }\n\n\n  async get(key:string):Promise<string | null> {\n    return this.redisClient.get(key);\n  }\n\n\n  async set(key:string, value:string, timeoutSec:number):Promise<void> {\n    if (timeoutSec === -1){\n      await this.redisClient.set(key, value);\n    }else {\n      await this.redisClient.set(key, value, {EX: timeoutSec});\n    }\n  }\n\n\n  async delete(key:string):Promise<void> {\n    await this.redisClient.del(key);\n  }\n\n\n  async update(key:string, value:string):Promise<void> {\n    const result = await this.redisClient.set(key, value,{XX:true,KEEPTTL:true})\n    if (result ===null){\n      throw new Error(`Key not found: ${key}`);\n    }\n  }\n\n\n  async has(key:string):Promise<boolean> {\n    const result = await this.redisClient.exists(key);\n    return result === 1;\n  }\n\n\n  async updateTimeout(key:string, timeoutSec:number):Promise<void> {\n    const exists =  await  this.redisClient.exists(key);\n\n    if (!exists) {\n      throw new Error(`Key not found: ${key}`);\n    }\n\n    if (timeoutSec === -1) {\n      await this.redisClient.persist(key);\n    }else {\n      await this.redisClient.expire(key, timeoutSec);\n    }\n\n  }\n\n  async getTimeout(key:string):Promise<number> {\n    const result = await this.redisClient.ttl(key);\n    // Redis TTL 返回值约定：\n    // -2 = key 不存在\n    // -1 = key 存在但无过期时间（永久）\n    // >0 = 剩余秒数\n    // 恰好与 XltTokenStore 接口约定一致\n    return result;\n  }\n\n  async keys(pattern: string): Promise<string[]> {\n    const result: string[] = [];\n    let cursor = \"0\";\n    do {\n      const reply = await this.redisClient.scan(cursor, { MATCH: pattern, COUNT: 100 });\n      cursor = String(reply.cursor);\n      result.push(...reply.keys);\n    } while (cursor !== \"0\");\n    return result;\n  }\n}\n","import { Inject, Injectable } from \"@nestjs/common\";\nimport { randomUUID } from 'node:crypto';\nimport { createRequire } from 'node:module';\nimport { XLT_TOKEN_CONFIG } from '@xlt-token/core';\nimport type { DurationInput, TokenStrategy, XltTokenConfig } from '@xlt-token/core';\n\nconst require = createRequire(import.meta.url);\n\nlet jsonwebtoken: typeof import('jsonwebtoken') | undefined;\n\nexport type XltJwtPayload = Record<string, any> & { sub: string; jti: string };\n\nfunction getJsonwebtoken(): typeof import('jsonwebtoken') {\n  try {\n    jsonwebtoken ??= require('jsonwebtoken') as typeof import('jsonwebtoken');\n    return jsonwebtoken;\n  } catch (error) {\n    const err = error as NodeJS.ErrnoException;\n    if (err.code === 'MODULE_NOT_FOUND') {\n      throw new Error(\n        'JwtStrategy requires the optional peer dependency \"jsonwebtoken\". '\n        + 'Install it in your application with \"pnpm add jsonwebtoken\".',\n      );\n    }\n    throw error;\n  }\n}\n\n@Injectable()\nexport class JwtStrategy implements TokenStrategy<XltJwtPayload> {\n  constructor(\n    @Inject(XLT_TOKEN_CONFIG) private readonly config: XltTokenConfig\n  ) { }\n\n  private ensureJwtConfig(config?: XltTokenConfig): NonNullable<XltTokenConfig['jwt']> {\n    const jwt = (config ?? this.config).jwt;\n    if (!jwt || !jwt.secret) {\n      throw new Error(\n        'JwtStrategy requires jwt config with a secret. '\n        + 'Provide { jwt: { secret: \"your-secret\" } } in the module config.',\n      );\n    }\n    return jwt;\n  }\n\n  createToken(loginId: string, config: XltTokenConfig, options?: { timeout?: DurationInput }): string {\n    const { sign } = getJsonwebtoken();\n    const jwt = this.ensureJwtConfig(config);\n    const jti = randomUUID();\n\n    const resolvedTimeout = options?.timeout ?? config.timeout;\n    const hasExpiry = typeof resolvedTimeout === 'number' ? resolvedTimeout > 0 : true;\n\n    return sign({\n      sub: loginId, jti\n    }, jwt.secret, {\n      algorithm: jwt.algorithm ?? 'HS256',\n      ...(jwt.issuer && { issuer: jwt.issuer }),\n      ...(jwt.audience && { audience: jwt.audience }),\n      ...(hasExpiry && { expiresIn: resolvedTimeout }),\n    })\n  }\n\n  generateToken(payload: any): string {\n    const { sign } = getJsonwebtoken();\n    const jwt = this.ensureJwtConfig();\n    return sign(payload, jwt.secret);\n  }\n\n  verifyToken(token: string): XltJwtPayload {\n    const { verify } = getJsonwebtoken();\n    const jwt = this.ensureJwtConfig();\n    return verify(token, jwt.secret) as XltJwtPayload;\n  }\n\n}\n","// 登录校验装饰器\n\nimport { SetMetadata } from '@nestjs/common';\nimport { XLT_CHECK_LOGIN_KEY } from '@xlt-token/core';\n\n\n/**\n * 登录校验装饰器\n * @constructor\n */\nexport const XltCheckLogin = () => SetMetadata(XLT_CHECK_LOGIN_KEY, true);\n","// 忽略校验装饰器\n\nimport { SetMetadata } from '@nestjs/common';\nimport { XLT_IGNORE_KEY } from '@xlt-token/core';\n\nexport const XltIgnore = () => SetMetadata(XLT_IGNORE_KEY, true);\n","// 注入当前用户 ID\n\nimport { createParamDecorator, ExecutionContext } from '@nestjs/common';\n\n/**\n * 注入当前用户 ID\n * @constructor\n */\nexport const LoginId = createParamDecorator(\n  (data: unknown, ctx: ExecutionContext) => {\n    const request = ctx.switchToHttp().getRequest();\n    return request.stpLoginId;\n  },\n);\n","// 注入当前 Token\n\nimport { createParamDecorator, ExecutionContext } from '@nestjs/common';\n\n\n/**\n * 注入当前 Token\n * @constructor\n */\nexport const TokenValue = createParamDecorator((data: any, ctx: ExecutionContext) => {\n  const request = ctx.switchToHttp().getRequest();\n  return request.stpToken;\n});\n","import { XLT_PERMISSION_KEY, XltMode } from '@xlt-token/core';\nimport { SetMetadata } from '@nestjs/common';\n\n\n/**\n * 权限检查装饰器\n * @param {string | string[]} permissions 权限列表\n * @param {Object} [options] 模式选项\n * @param {XltMode} [options.mode] 模式选项\n * @constructor\n */\nexport const XltCheckPermission = (permissions: string | string[], options?: { mode: XltMode; }) => {\n  const perms = Array.isArray(permissions) ? permissions : [permissions];\n  const mode = options?.mode ?? XltMode.AND;\n  return SetMetadata(XLT_PERMISSION_KEY, { permissions: perms, mode });\n};\n","import { XLT_ROLE_KEY, XltMode } from '@xlt-token/core';\nimport { SetMetadata } from '@nestjs/common';\n\n\n/**\n * 角色检查装饰器\n * @param {string | string[]} roles 角色列表\n * @param {Object} [options] 模式选项\n * @param {XltMode} [options.mode] 模式选项\n * @constructor\n */\nexport const XltCheckRole = (roles: string | string[], options?: { mode: XltMode; }) => {\n  const _roles = Array.isArray(roles) ? roles : [roles];\n  const mode = options?.mode ?? XltMode.AND;\n  return SetMetadata(XLT_ROLE_KEY, { roles: _roles, mode });\n\n};\n","import { SetMetadata } from \"@nestjs/common\"\n\nexport const XLT_CHECK_SAFE_KEY = 'XLT_CHECK_SAFE';\n\nexport const XltCheckSafe = (business: string) => {\n  return SetMetadata(XLT_CHECK_SAFE_KEY, business);\n}\n","import { UnauthorizedException } from '@nestjs/common';\nimport { NotLoginType } from '@xlt-token/core';\n\nexport class NotLoginException extends UnauthorizedException {\n  public readonly type: NotLoginType;\n  public readonly token: string | undefined;\n\n  constructor(type: NotLoginType, token?: string) {\n    super({\n      statusCode: 401,\n      type,\n      message: NotLoginException.describeType(type),\n    });\n    this.type = type;\n    this.token = token;\n  }\n\n  private static describeType(type: NotLoginType): string {\n    const map: Record<NotLoginType, string> = {\n      [NotLoginType.NOT_TOKEN]: '未提供 Token',\n      [NotLoginType.INVALID_TOKEN]: 'Token 无效',\n      [NotLoginType.TOKEN_TIMEOUT]: 'Token 已过期',\n      [NotLoginType.TOKEN_FREEZE]: 'Token 已被冻结',\n      [NotLoginType.BE_REPLACED]: '已被顶下线',\n      [NotLoginType.KICK_OUT]: '已被踢下线',\n    };\n    return map[type] ?? '未登录';\n  }\n}\n\n","import { ForbiddenException } from '@nestjs/common';\nimport { XltMode } from '@xlt-token/core';\n\nexport class NotPermissionException extends ForbiddenException {\n  public readonly permission: string | string[];\n  public readonly mode: XltMode;\n\n  constructor(permission: string | string[], mode: XltMode) {\n    super({\n      statusCode: 403,\n      type: 'NOT_PERMISSION',\n      message: `缺少权限: ${Array.isArray(permission) ? permission.join(', ') : permission}`,\n    });\n    this.permission = permission;\n    this.mode = mode;\n  }\n}\n","import { ForbiddenException } from '@nestjs/common';\nimport { XltMode } from '@xlt-token/core';\n\nexport class NotRoleException extends ForbiddenException {\n  public readonly role: string | string[];\n  public readonly mode: XltMode;\n\n  constructor(role: string | string[], mode: XltMode) {\n    super({\n      statusCode: 403,\n      type: 'NOT_ROLE',\n      message: `缺少角色: ${Array.isArray(role) ? role.join(', ') : role}`,\n    });\n    this.role = role;\n    this.mode = mode;\n  }\n}\n","import { ForbiddenException } from \"@nestjs/common\";\n\nexport class NotSafeException extends ForbiddenException {\n  readonly business: string;\n\n\n  constructor(business: string) {\n    super({\n      statusCode: 403,\n      type: 'NOT_SAFE',\n      message: `二级认证未开启：${business}`,\n    });\n    this.business = business;\n  }\n\n}\n","import {\n  createExpressContext,\n  type CookieOptions,\n  type ExpressLikeResponse,\n  NotLoginException as CoreNotLoginException,\n  NotPermissionException as CoreNotPermissionException,\n  NotRoleException as CoreNotRoleException,\n  NotSafeException as CoreNotSafeException,\n} from '@xlt-token/core';\nimport { NotLoginException } from '../exceptions/not-login.exception.js';\nimport { NotPermissionException } from '../exceptions/not-permission.exception.js';\nimport { NotRoleException } from '../exceptions/not-role.exception.js';\nimport { NotSafeException } from '../exceptions/not-safe.exception.js';\n\n/**\n * Fastify reply 的写回 API 与 Express response 不同：\n * - 写 header：Express 用 `res.setHeader(n, v)`，Fastify 用 `reply.header(n, v)`\n * - 写 cookie：Express 用 `res.cookie(n, v, o)`，Fastify 用 `reply.setCookie(n, v, o)`\n *\n * 这里把任意一种 response 归一化成 core 期望的 {@link ExpressLikeResponse} 形态，\n * 让核心层无需感知底层 HTTP 平台。读取侧（headers/cookies/query）两个平台形态一致，\n * 直接复用 core 的 createExpressContext。\n */\nfunction normalizeResponse(res: any): ExpressLikeResponse {\n  return {\n    setHeader(name: string, value: string): void {\n      if (typeof res?.setHeader === 'function') {\n        // Express response / 原生 Node 响应\n        res.setHeader(name, value);\n      } else if (typeof res?.header === 'function') {\n        // Fastify reply\n        res.header(name, value);\n      } else {\n        throw new Error(\n          'xlt-token: 当前 response 不支持写入 header（既无 setHeader 也无 header 方法）',\n        );\n      }\n    },\n    cookie(name: string, value: string, options?: CookieOptions): void {\n      if (typeof res?.cookie === 'function') {\n        // Express response（或已注册 @fastify/cookie 暴露的 cookie 别名）\n        res.cookie(name, value, options);\n      } else if (typeof res?.setCookie === 'function') {\n        // Fastify reply + @fastify/cookie 插件\n        res.setCookie(name, value, options);\n      } else {\n        throw new Error(\n          'xlt-token: 当前 response 不支持写入 cookie。'\n            + '若使用 Fastify，请先注册 @fastify/cookie 插件。',\n        );\n      }\n    },\n  };\n}\n\nexport function createNestHttpContext(req: any, res: any) {\n  return createExpressContext(req, normalizeResponse(res));\n}\n\nexport function rethrowCoreAuthException(error: unknown): never {\n  if (error instanceof CoreNotLoginException) {\n    throw new NotLoginException(error.type, error.token);\n  }\n  if (error instanceof CoreNotPermissionException) {\n    throw new NotPermissionException(error.permission, error.mode);\n  }\n  if (error instanceof CoreNotRoleException) {\n    throw new NotRoleException(error.role, error.mode);\n  }\n  if (error instanceof CoreNotSafeException) {\n    throw new NotSafeException(error.business);\n  }\n  throw error;\n}\n","// 全局守卫\n\nimport { CanActivate, ExecutionContext, Inject, Injectable, Optional } from '@nestjs/common';\nimport { Reflector } from '@nestjs/core';\nimport {\n  type AuthResult,\n  StpLogic,\n  StpPermLogic,\n  XLT_CHECK_LOGIN_KEY,\n  XLT_IGNORE_KEY,\n  XLT_PERMISSION_KEY,\n  XLT_ROLE_KEY,\n  XLT_TOKEN_CONFIG,\n  type XltTokenConfig,\n} from '@xlt-token/core';\nimport { XLT_CHECK_SAFE_KEY } from '../decorators/xlt-check-safe.decorator.js';\nimport { createNestHttpContext, rethrowCoreAuthException } from '../http/nest-bridge.js';\n\n@Injectable()\nexport class XltTokenGuard implements CanActivate {\n  constructor(\n    private readonly reflector: Reflector,\n    @Inject(XLT_TOKEN_CONFIG) private readonly config: XltTokenConfig,\n    private readonly stpLogic: StpLogic,\n    @Optional() private readonly stpPermLogic?: StpPermLogic,\n  ) {\n  }\n\n  async canActivate(context: ExecutionContext): Promise<boolean> {\n    if (!this.requiresLogin(context)) return true;\n\n    const request = context.switchToHttp().getRequest();\n    const response = context.switchToHttp().getResponse();\n\n    let result: AuthResult;\n    try {\n      result = await this.stpLogic.checkLogin(createNestHttpContext(request, response));\n    } catch (error) {\n      rethrowCoreAuthException(error);\n    }\n\n    const business = this.getBusiness(context);\n    request.stpLoginId = result.loginId;\n    request.stpToken = result.token;\n\n    try {\n      if (this.stpPermLogic) {\n        const handler = context.getHandler();\n        const cls = context.getClass();\n\n        const permMeta = this.reflector.getAllAndOverride(XLT_PERMISSION_KEY, [handler, cls]);\n        if (permMeta) {\n          await this.stpPermLogic.checkPermission(result.loginId!, permMeta.permissions, permMeta.mode);\n        }\n\n        const roleMeta = this.reflector.getAllAndOverride(XLT_ROLE_KEY, [handler, cls]);\n        if (roleMeta) {\n          await this.stpPermLogic.checkRole(result.loginId!, roleMeta.roles, roleMeta.mode);\n        }\n      }\n\n      if (business) {\n        await this.stpLogic.checkSafe(result.token!, business);\n      }\n    } catch (error) {\n      rethrowCoreAuthException(error);\n    }\n\n    return true;\n  }\n\n  private requiresLogin(context: ExecutionContext): boolean {\n    const isIgnored = this.reflector.getAllAndOverride<boolean>(XLT_IGNORE_KEY, [\n      context.getHandler(),\n      context.getClass(),\n    ]);\n\n    if (this.config.defaultCheck) {\n      return !isIgnored;\n    }\n\n    const shouldCheck = this.reflector.getAllAndOverride<boolean>(XLT_CHECK_LOGIN_KEY, [\n      context.getHandler(),\n      context.getClass(),\n    ]);\n    return shouldCheck ?? false;\n  }\n\n  private getBusiness(context: ExecutionContext): string {\n    return this.reflector.getAllAndOverride<string>(XLT_CHECK_SAFE_KEY, [\n      context.getHandler(),\n      context.getClass(),\n    ]);\n  }\n}\n","import { CanActivate, ExecutionContext, Inject, Injectable } from '@nestjs/common';\nimport { Reflector } from '@nestjs/core';\nimport {\n  NotLoginException as CoreNotLoginException,\n  NotLoginType,\n  StpLogic,\n  XLT_CHECK_LOGIN_KEY,\n  XLT_IGNORE_KEY,\n  XLT_TOKEN_CONFIG,\n  type XltTokenConfig,\n} from '@xlt-token/core';\nimport { NotLoginException } from '../exceptions/not-login.exception.js';\nimport { createNestHttpContext } from '../http/nest-bridge.js';\n\n@Injectable()\nexport abstract class XltAbstractLoginGuard implements CanActivate {\n  protected constructor(\n    protected readonly reflector: Reflector,\n    @Inject(XLT_TOKEN_CONFIG) protected readonly config: XltTokenConfig,\n    protected readonly stpLogic: StpLogic,\n  ) {}\n\n  async canActivate(ctx: ExecutionContext): Promise<boolean> {\n    if (!this.requiresLogin(ctx)) return true;\n\n    const request = ctx.switchToHttp().getRequest();\n    const response = ctx.switchToHttp().getResponse();\n\n    let result: { ok: boolean; loginId?: string; token?: string; reason?: NotLoginType };\n    try {\n      result = await this.stpLogic.checkLogin(createNestHttpContext(request, response));\n    } catch (err) {\n      if (err instanceof CoreNotLoginException) {\n        await this.onAuthFail?.({ ok: false, reason: err.type, token: err.token }, request);\n        throw new NotLoginException(err.type, err.token);\n      }\n      throw err;\n    }\n\n    request.stpLoginId = result.loginId;\n    request.stpToken = result.token;\n    await this.onAuthSuccess?.(result, request);\n    return true;\n  }\n\n  protected requiresLogin(ctx: ExecutionContext): boolean {\n    const isIgnored = this.reflector.getAllAndOverride<boolean>(XLT_IGNORE_KEY, [ctx.getHandler(), ctx.getClass()]);\n\n    if (this.config.defaultCheck) return !isIgnored;\n\n    return this.reflector.getAllAndOverride<boolean>(XLT_CHECK_LOGIN_KEY, [ctx.getHandler(), ctx.getClass()]) ?? false;\n  }\n\n  protected onAuthSuccess?(\n    result: {\n      ok: boolean;\n      loginId?: string | undefined;\n      token?: string | undefined;\n      reason?: NotLoginType | undefined;\n    },\n    request: any,\n  ): void | Promise<void>;\n\n  protected onAuthFail?(\n    result: {\n      ok: boolean;\n      loginId?: string | undefined;\n      token?: string | undefined;\n      reason?: NotLoginType | undefined;\n    },\n    request: any,\n  ): void | Promise<void>;\n\n  protected onPermissionDenied?(\n    result: {\n      ok: boolean;\n      loginId?: string | undefined;\n      token?: string | undefined;\n      reason?: NotLoginType | undefined;\n    },\n    request: any,\n  ): void | Promise<void>;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;AAyCO,2BAAM,eAAe;;;;;0BAC6B;GACjD,SAASA;GACT,aACI,QACA,OACA,UACA,UACC,IAAIA,WAAS,QAAQ,OAAO,UAAU,MAAM;GACjD,QAAQ;IAAEC;IAAkBC;IAAiBC;IAAoBC;IAAiB;GACrF;;;8BACwD;GACrD,SAASC;GACT,aACI,cACA,OACA,WACC,IAAIA,eAAa,cAAc,OAAO,OAAO;GAClD,QAAQ;IAAEC;IAAmBJ;IAAiBD;IAAkB;GACnE;;;sBACgD;GAC7C,SAAS;GACT,aAAa,UAAoB,iBAA+B;AAC5D,kBAAY,SAAS;AACrB,sBAAgB,aAAa;AAC7B,WAAO;;GAEX,QAAQ,CAAED,YAAUK,eAAc;GACrC;;;uBACuC;GAAEJ;GAAkBC;GAAiBC;GAAoBH;GAAUK;GAAc;;CAEzH,OAAO,QAAQ,UAAiC,EAAE,EAAE;EAChD,MAAM,EAAC,QAAQ,YAAY,OAAO,UAAU,WAAW,OAAO,YAAY,EAAE,EAAE,iBAAgB;AAE9F,SAAO;GACH;GACA,WAAW;IACP;KAAC,SAASJ;KAAkB,UAAU,wBAAwB,WAAW;KAAC;oBAC3D,oBAAoB,MAAM;oBAC1B,uBAAuB,SAAS;oBAChC,2BAA2B,aAAa;oBACxC,oBAAoB,QAAQ,MAAM;oBAClC;oBACA;oBACA;IACf,GAAG;IACN;GACD,yBAAwB;GACxB,QAAQ;GACX;;CAGL,OAAO,aAAa,SAAqC;EACrD,MAAM,EACF,YACA,SAAS,EAAE,EACX,UAAU,EAAE,EACZ,OACA,UACA,WAAW,OACX,YAAY,EAAE,EACd,iBACA;AAEJ,SAAO;GACH;GACA;GACA,WAAW;IACP;KACI,SAASA;KACT,YAAY,OAAO,GAAG,SAAgB;MAClC,MAAM,EAAC,SAAS,EAAE,KAAI,MAAM,WAAW,GAAG,KAAK;AAC/C,aAAO,wBAAwB,OAAO;;KAE1C;KACH;oBACc,oBAAoB,MAAM;oBAC1B,uBAAuB,SAAS;oBAChC,2BAA2B,aAAa;oBACxC,oBAAoB,QAAQ,MAAM;oBAClC;oBACA;oBACA;IACf,GAAG;IACN;GACD,yBAAwB;GACxB,QAAQ;GACX;;CAGL,OAAe,oBACX,OACQ;AACR,MAAK,CAAC,MAAQ,QAAO;GAAC,SAASC;GAAiB,UAAUK;GAAY;AACtE,SAAO,cAAc,QACf;GAAC,SAASL;GAAiB,UAAU,MAAM;GAAS,GACpD;GAAC,SAASA;GAAiB,UAAU,MAAM;GAAS;;CAG9D,OAAe,uBACX,UACQ;AACR,SAAO,UAAU,WACX;GAAC,SAASC;GAAoB,UAAU,SAAS;GAAS,GAC1D;GAAC,SAASA;GAAoB,UAAUK;GAAa;;CAG/D,OAAe,2BACX,cACQ;AACR,MAAK,aAAe,QAAO;GAAC,SAASF;GAAmB,UAAU;GAAa;AAC/E,SAAO;GACH,SAASA;GACT,UAAU;IACN,yBAAyB;AACrB,WAAM,IAAI,MAAM,iDAAiD;;IAErE,mBAAmB;AACf,WAAM,IAAI,MAAM,2CAA2C;;IAElE;GACJ;;CAGL,OAAe,oBACX,OACQ;AACR,SAAO;GAAC,SAASF;GAAiB,UAAU,SAAS,EAAE;GAAC;;;+CAhI/D,OAAO,EAAE,CAAC;;;;;;;;;;;;;;;;;;ACpCX,MAAc,mBAAmB;AAIzB,uBAAM,WAAoC;CAEhD,YACE,AACiB,aACjB;EADiB;;CAMnB,MAAM,IAAI,KAAmC;AAC3C,SAAO,KAAK,YAAY,IAAI,IAAI;;CAIlC,MAAM,IAAI,KAAY,OAAc,YAAiC;AACnE,MAAI,eAAe,GACjB,OAAM,KAAK,YAAY,IAAI,KAAK,MAAM;MAEtC,OAAM,KAAK,YAAY,IAAI,KAAK,OAAO,EAAC,IAAI,YAAW,CAAC;;CAK5D,MAAM,OAAO,KAA0B;AACrC,QAAM,KAAK,YAAY,IAAI,IAAI;;CAIjC,MAAM,OAAO,KAAY,OAA4B;AAEnD,MADe,MAAM,KAAK,YAAY,IAAI,KAAK,OAAM;GAAC,IAAG;GAAK,SAAQ;GAAK,CAAC,KAC9D,KACZ,OAAM,IAAI,MAAM,kBAAkB,MAAM;;CAK5C,MAAM,IAAI,KAA6B;AAErC,SADe,MAAM,KAAK,YAAY,OAAO,IAAI,KAC/B;;CAIpB,MAAM,cAAc,KAAY,YAAiC;AAG/D,MAAI,CAFY,MAAO,KAAK,YAAY,OAAO,IAAI,CAGjD,OAAM,IAAI,MAAM,kBAAkB,MAAM;AAG1C,MAAI,eAAe,GACjB,OAAM,KAAK,YAAY,QAAQ,IAAI;MAEnC,OAAM,KAAK,YAAY,OAAO,KAAK,WAAW;;CAKlD,MAAM,WAAW,KAA4B;AAO3C,SANe,MAAM,KAAK,YAAY,IAAI,IAAI;;CAShD,MAAM,KAAK,SAAoC;EAC7C,MAAM,SAAmB,EAAE;EAC3B,IAAI,SAAS;AACb,KAAG;GACD,MAAM,QAAQ,MAAM,KAAK,YAAY,KAAK,QAAQ;IAAE,OAAO;IAAS,OAAO;IAAK,CAAC;AACjF,YAAS,OAAO,MAAM,OAAO;AAC7B,UAAO,KAAK,GAAG,MAAM,KAAK;WACnB,WAAW;AACpB,SAAO;;;;CA7EV,YAAY;oBAIR,OAAO,iBAAiB;;;;;;ACL7B,MAAM,UAAU,cAAc,OAAO,KAAK,IAAI;AAE9C,IAAI;AAIJ,SAAS,kBAAiD;AACxD,KAAI;AACF,mBAAiB,QAAQ,eAAe;AACxC,SAAO;UACA,OAAO;AAEd,MADY,MACJ,SAAS,mBACf,OAAM,IAAI,MACR,qIAED;AAEH,QAAM;;;AAKH,wBAAM,YAAoD;CAC/D,YACE,AAA2C,QAC3C;EAD2C;;CAG7C,AAAQ,gBAAgB,QAA6D;EACnF,MAAM,OAAO,UAAU,KAAK,QAAQ;AACpC,MAAI,CAAC,OAAO,CAAC,IAAI,OACf,OAAM,IAAI,MACR,oHAED;AAEH,SAAO;;CAGT,YAAY,SAAiB,QAAwB,SAA+C;EAClG,MAAM,EAAE,SAAS,iBAAiB;EAClC,MAAM,MAAM,KAAK,gBAAgB,OAAO;EACxC,MAAM,MAAM,YAAY;EAExB,MAAM,kBAAkB,SAAS,WAAW,OAAO;EACnD,MAAM,YAAY,OAAO,oBAAoB,WAAW,kBAAkB,IAAI;AAE9E,SAAO,KAAK;GACV,KAAK;GAAS;GACf,EAAE,IAAI,QAAQ;GACb,WAAW,IAAI,aAAa;GAC5B,GAAI,IAAI,UAAU,EAAE,QAAQ,IAAI,QAAQ;GACxC,GAAI,IAAI,YAAY,EAAE,UAAU,IAAI,UAAU;GAC9C,GAAI,aAAa,EAAE,WAAW,iBAAiB;GAChD,CAAC;;CAGJ,cAAc,SAAsB;EAClC,MAAM,EAAE,SAAS,iBAAiB;AAElC,SAAO,KAAK,SADA,KAAK,iBAAiB,CACT,OAAO;;CAGlC,YAAY,OAA8B;EACxC,MAAM,EAAE,WAAW,iBAAiB;AAEpC,SAAO,OAAO,OADF,KAAK,iBAAiB,CACT,OAAO;;;;CA5CnC,YAAY;oBAGR,OAAOK,mBAAiB;;;;;;;;;;ACrB7B,MAAa,sBAAsB,YAAY,qBAAqB,KAAK;;;;ACLzE,MAAa,kBAAkB,YAAY,gBAAgB,KAAK;;;;;;;;ACGhE,MAAa,UAAU,sBACpB,MAAe,QAA0B;AAExC,QADgB,IAAI,cAAc,CAAC,YAAY,CAChC;EAElB;;;;;;;;ACJD,MAAa,aAAa,sBAAsB,MAAW,QAA0B;AAEnF,QADgB,IAAI,cAAc,CAAC,YAAY,CAChC;EACf;;;;;;;;;;;ACDF,MAAa,sBAAsB,aAAgC,YAAiC;AAGlG,QAAO,YAAY,oBAAoB;EAAE,aAF3B,MAAM,QAAQ,YAAY,GAAG,cAAc,CAAC,YAAY;EAET,MADhD,SAAS,QAAQC,UAAQ;EAC6B,CAAC;;;;;;;;;;;;ACHtE,MAAa,gBAAgB,OAA0B,YAAiC;AAGtF,QAAO,YAAY,cAAc;EAAE,OAFpB,MAAM,QAAQ,MAAM,GAAG,QAAQ,CAAC,MAAM;EAEH,MADrC,SAAS,QAAQC,UAAQ;EACkB,CAAC;;;;;ACZ3D,MAAa,qBAAqB;AAElC,MAAa,gBAAgB,aAAqB;AAChD,QAAO,YAAY,oBAAoB,SAAS;;;;;ACFlD,IAAa,oBAAb,MAAa,0BAA0B,sBAAsB;CAI3D,YAAY,MAAoB,OAAgB;AAC9C,QAAM;GACJ,YAAY;GACZ;GACA,SAAS,kBAAkB,aAAa,KAAK;GAC9C,CAAC;AACF,OAAK,OAAO;AACZ,OAAK,QAAQ;;CAGf,OAAe,aAAa,MAA4B;AAStD,SAR0C;IACvCC,eAAa,YAAY;IACzBA,eAAa,gBAAgB;IAC7BA,eAAa,gBAAgB;IAC7BA,eAAa,eAAe;IAC5BA,eAAa,cAAc;IAC3BA,eAAa,WAAW;GAC1B,CACU,SAAS;;;;;;ACvBxB,IAAa,yBAAb,cAA4C,mBAAmB;CAI7D,YAAY,YAA+B,MAAe;AACxD,QAAM;GACJ,YAAY;GACZ,MAAM;GACN,SAAS,SAAS,MAAM,QAAQ,WAAW,GAAG,WAAW,KAAK,KAAK,GAAG;GACvE,CAAC;AACF,OAAK,aAAa;AAClB,OAAK,OAAO;;;;;;ACXhB,IAAa,mBAAb,cAAsC,mBAAmB;CAIvD,YAAY,MAAyB,MAAe;AAClD,QAAM;GACJ,YAAY;GACZ,MAAM;GACN,SAAS,SAAS,MAAM,QAAQ,KAAK,GAAG,KAAK,KAAK,KAAK,GAAG;GAC3D,CAAC;AACF,OAAK,OAAO;AACZ,OAAK,OAAO;;;;;;ACZhB,IAAa,mBAAb,cAAsC,mBAAmB;CAIvD,YAAY,UAAkB;AAC5B,QAAM;GACJ,YAAY;GACZ,MAAM;GACN,SAAS,WAAW;GACrB,CAAC;AACF,OAAK,WAAW;;;;;;;;;;;;;;;ACWpB,SAAS,kBAAkB,KAA+B;AACxD,QAAO;EACL,UAAU,MAAc,OAAqB;AAC3C,OAAI,OAAO,KAAK,cAAc,WAE5B,KAAI,UAAU,MAAM,MAAM;YACjB,OAAO,KAAK,WAAW,WAEhC,KAAI,OAAO,MAAM,MAAM;OAEvB,OAAM,IAAI,MACR,iEACD;;EAGL,OAAO,MAAc,OAAe,SAA+B;AACjE,OAAI,OAAO,KAAK,WAAW,WAEzB,KAAI,OAAO,MAAM,OAAO,QAAQ;YACvB,OAAO,KAAK,cAAc,WAEnC,KAAI,UAAU,MAAM,OAAO,QAAQ;OAEnC,OAAM,IAAI,MACR,2EAED;;EAGN;;AAGH,SAAgB,sBAAsB,KAAU,KAAU;AACxD,QAAOC,uBAAqB,KAAK,kBAAkB,IAAI,CAAC;;AAG1D,SAAgB,yBAAyB,OAAuB;AAC9D,KAAI,iBAAiBC,oBACnB,OAAM,IAAI,kBAAkB,MAAM,MAAM,MAAM,MAAM;AAEtD,KAAI,iBAAiBC,yBACnB,OAAM,IAAI,uBAAuB,MAAM,YAAY,MAAM,KAAK;AAEhE,KAAI,iBAAiBC,mBACnB,OAAM,IAAI,iBAAiB,MAAM,MAAM,MAAM,KAAK;AAEpD,KAAI,iBAAiBC,mBACnB,OAAM,IAAI,iBAAiB,MAAM,SAAS;AAE5C,OAAM;;;;;;ACrDD,0BAAM,cAAqC;CAChD,YACE,AAAiB,WACjB,AAA2C,QAC3C,AAAiB,UACjB,AAA6B,cAC7B;EAJiB;EAC0B;EAC1B;EACY;;CAI/B,MAAM,YAAY,SAA6C;AAC7D,MAAI,CAAC,KAAK,cAAc,QAAQ,CAAE,QAAO;EAEzC,MAAM,UAAU,QAAQ,cAAc,CAAC,YAAY;EACnD,MAAM,WAAW,QAAQ,cAAc,CAAC,aAAa;EAErD,IAAI;AACJ,MAAI;AACF,YAAS,MAAM,KAAK,SAAS,WAAW,sBAAsB,SAAS,SAAS,CAAC;WAC1E,OAAO;AACd,4BAAyB,MAAM;;EAGjC,MAAM,WAAW,KAAK,YAAY,QAAQ;AAC1C,UAAQ,aAAa,OAAO;AAC5B,UAAQ,WAAW,OAAO;AAE1B,MAAI;AACF,OAAI,KAAK,cAAc;IACrB,MAAM,UAAU,QAAQ,YAAY;IACpC,MAAM,MAAM,QAAQ,UAAU;IAE9B,MAAM,WAAW,KAAK,UAAU,kBAAkB,oBAAoB,CAAC,SAAS,IAAI,CAAC;AACrF,QAAI,SACF,OAAM,KAAK,aAAa,gBAAgB,OAAO,SAAU,SAAS,aAAa,SAAS,KAAK;IAG/F,MAAM,WAAW,KAAK,UAAU,kBAAkB,cAAc,CAAC,SAAS,IAAI,CAAC;AAC/E,QAAI,SACF,OAAM,KAAK,aAAa,UAAU,OAAO,SAAU,SAAS,OAAO,SAAS,KAAK;;AAIrF,OAAI,SACF,OAAM,KAAK,SAAS,UAAU,OAAO,OAAQ,SAAS;WAEjD,OAAO;AACd,4BAAyB,MAAM;;AAGjC,SAAO;;CAGT,AAAQ,cAAc,SAAoC;EACxD,MAAM,YAAY,KAAK,UAAU,kBAA2B,gBAAgB,CAC1E,QAAQ,YAAY,EACpB,QAAQ,UAAU,CACnB,CAAC;AAEF,MAAI,KAAK,OAAO,aACd,QAAO,CAAC;AAOV,SAJoB,KAAK,UAAU,kBAA2B,qBAAqB,CACjF,QAAQ,YAAY,EACpB,QAAQ,UAAU,CACnB,CAAC,IACoB;;CAGxB,AAAQ,YAAY,SAAmC;AACrD,SAAO,KAAK,UAAU,kBAA0B,oBAAoB,CAClE,QAAQ,YAAY,EACpB,QAAQ,UAAU,CACnB,CAAC;;;;CA1EL,YAAY;oBAIR,OAAOC,mBAAiB;oBAExB,UAAU;;;;;;;;;;;;ACTR,kCAAe,sBAA6C;CACjE,AAAU,YACR,AAAmB,WACnB,AAA6C,QAC7C,AAAmB,UACnB;EAHmB;EAC0B;EAC1B;;CAGrB,MAAM,YAAY,KAAyC;AACzD,MAAI,CAAC,KAAK,cAAc,IAAI,CAAE,QAAO;EAErC,MAAM,UAAU,IAAI,cAAc,CAAC,YAAY;EAC/C,MAAM,WAAW,IAAI,cAAc,CAAC,aAAa;EAEjD,IAAI;AACJ,MAAI;AACF,YAAS,MAAM,KAAK,SAAS,WAAW,sBAAsB,SAAS,SAAS,CAAC;WAC1E,KAAK;AACZ,OAAI,eAAeC,qBAAuB;AACxC,UAAM,KAAK,aAAa;KAAE,IAAI;KAAO,QAAQ,IAAI;KAAM,OAAO,IAAI;KAAO,EAAE,QAAQ;AACnF,UAAM,IAAI,kBAAkB,IAAI,MAAM,IAAI,MAAM;;AAElD,SAAM;;AAGR,UAAQ,aAAa,OAAO;AAC5B,UAAQ,WAAW,OAAO;AAC1B,QAAM,KAAK,gBAAgB,QAAQ,QAAQ;AAC3C,SAAO;;CAGT,AAAU,cAAc,KAAgC;EACtD,MAAM,YAAY,KAAK,UAAU,kBAA2B,gBAAgB,CAAC,IAAI,YAAY,EAAE,IAAI,UAAU,CAAC,CAAC;AAE/G,MAAI,KAAK,OAAO,aAAc,QAAO,CAAC;AAEtC,SAAO,KAAK,UAAU,kBAA2B,qBAAqB,CAAC,IAAI,YAAY,EAAE,IAAI,UAAU,CAAC,CAAC,IAAI;;;;CApChH,YAAY;oBAIR,OAAOC,mBAAiB"}
+{"version":3,"file":"index.mjs","names":["StpLogic","XLT_TOKEN_CONFIG","XLT_TOKEN_STORE","XLT_TOKEN_STRATEGY","XLT_EVENT_SINK","StpPermLogic","XLT_STP_INTERFACE","MemoryStore","UuidStrategy","BaseRedisStore","BaseIORedisStore","XltMode","XltMode","NotLoginType","createExpressContext","CoreNotLoginException","CoreNotPermissionException","CoreNotRoleException","CoreNotSafeException","XLT_TOKEN_CONFIG","CoreNotLoginException","XLT_TOKEN_CONFIG"],"sources":["../src/xlt-token.module.ts","../src/store/redis-store.ts","../src/store/ioredis-store.ts","../src/decorators/xlt-check-login.decorator.ts","../src/decorators/xlt-ignore.decorator.ts","../src/decorators/login-id.decorator.ts","../src/decorators/token-value.decorator.ts","../src/decorators/xlt-check-permission.decorator.ts","../src/decorators/xlt-check-role.decorator.ts","../src/decorators/xlt-check-safe.decorator.ts","../src/exceptions/not-login.exception.ts","../src/exceptions/not-permission.exception.ts","../src/exceptions/not-role.exception.ts","../src/exceptions/not-safe.exception.ts","../src/http/nest-bridge.ts","../src/guards/xlt-token.guard.ts","../src/guards/xlt-abstract-login.guard.ts"],"sourcesContent":["import type { ModuleMetadata, Provider } from \"@nestjs/common\";\nimport { Module } from \"@nestjs/common\";\nimport type {\n  StpInterface,\n  TokenStrategy,\n  XltEventSink,\n  XltTokenConfig,\n  XltTokenConfigInput,\n  XltTokenStore,\n} from \"@xlt-token/core\";\nimport {\n  MemoryStore,\n  setStpLogic,\n  setStpPermLogic,\n  StpLogic,\n  StpPermLogic,\n  UuidStrategy,\n  XLT_STP_INTERFACE,\n  XLT_EVENT_SINK,\n  XLT_TOKEN_CONFIG,\n  XLT_TOKEN_STORE,\n  XLT_TOKEN_STRATEGY,\n  normalizeXltTokenConfig,\n} from \"@xlt-token/core\";\n\nexport interface XltTokenModuleOptions {\n  config?: Partial<XltTokenConfigInput>;\n  store?: { useClass: new (...args: any[]) => XltTokenStore } | { useValue: XltTokenStore };\n  strategy?: { useClass: new (...args: any[]) => TokenStrategy } | { useValue: TokenStrategy };\n  isGlobal?: boolean;\n  providers?: Provider[];\n  stpInterface?: new (...args: any[]) => StpInterface;\n  eventSink?: XltEventSink;\n}\n\nexport interface XltTokenModuleAsyncOptions extends Pick<ModuleMetadata, \"imports\"> {\n  useFactory: (...args: any[]) => Promise<XltTokenModuleOptions> | XltTokenModuleOptions;\n  inject?: any[];\n  store?: { useClass: new (...args: any[]) => XltTokenStore } | { useValue: XltTokenStore };\n  strategy?: { useClass: new (...args: any[]) => TokenStrategy } | { useValue: TokenStrategy };\n  isGlobal?: boolean;\n  providers?: Provider[];\n  stpInterface?: new (...args: any[]) => StpInterface;\n  eventSink?: XltEventSink;\n}\n\n@Module({})\nexport class XltTokenModule {\n  private static readonly stpLogicProvider: Provider = {\n    provide: StpLogic,\n    useFactory: (\n      config: XltTokenConfig,\n      store: XltTokenStore,\n      strategy: TokenStrategy,\n      eventSink: XltEventSink,\n    ) => new StpLogic(config, store, strategy, eventSink),\n    inject: [XLT_TOKEN_CONFIG, XLT_TOKEN_STORE, XLT_TOKEN_STRATEGY, XLT_EVENT_SINK],\n  };\n  private static readonly stpPermLogicProvider: Provider = {\n    provide: StpPermLogic,\n    useFactory: (stpInterface: StpInterface, store: XltTokenStore, config: XltTokenConfig) =>\n      new StpPermLogic(stpInterface, store, config),\n    inject: [XLT_STP_INTERFACE, XLT_TOKEN_STORE, XLT_TOKEN_CONFIG],\n  };\n  private static readonly initProvider: Provider = {\n    provide: \"XLT_TOKEN_INIT\",\n    useFactory: (stpLogic: StpLogic, stpPermLogic: StpPermLogic) => {\n      setStpLogic(stpLogic);\n      setStpPermLogic(stpPermLogic);\n      return true;\n    },\n    inject: [StpLogic, StpPermLogic],\n  };\n  private static readonly moduleExports = [\n    XLT_TOKEN_CONFIG,\n    XLT_TOKEN_STORE,\n    XLT_TOKEN_STRATEGY,\n    StpLogic,\n    StpPermLogic,\n  ];\n\n  static forRoot(options: XltTokenModuleOptions = {}) {\n    const {\n      config: userConfig,\n      store,\n      strategy,\n      isGlobal = false,\n      providers = [],\n      stpInterface,\n    } = options;\n\n    return {\n      module: XltTokenModule,\n      providers: [\n        { provide: XLT_TOKEN_CONFIG, useValue: normalizeXltTokenConfig(userConfig) },\n        XltTokenModule.createStoreProvider(store),\n        XltTokenModule.createStrategyProvider(strategy),\n        XltTokenModule.createStpInterfaceProvider(stpInterface),\n        XltTokenModule.createEventSinkProvider(options.eventSink),\n        XltTokenModule.stpLogicProvider,\n        XltTokenModule.stpPermLogicProvider,\n        XltTokenModule.initProvider,\n        ...providers,\n      ],\n      exports: XltTokenModule.moduleExports,\n      global: isGlobal,\n    };\n  }\n\n  static forRootAsync(options: XltTokenModuleAsyncOptions) {\n    const {\n      useFactory,\n      inject = [],\n      imports = [],\n      store,\n      strategy,\n      isGlobal = false,\n      providers = [],\n      stpInterface,\n    } = options;\n\n    return {\n      module: XltTokenModule,\n      imports,\n      providers: [\n        {\n          provide: XLT_TOKEN_CONFIG,\n          useFactory: async (...args: any[]) => {\n            const { config = {} } = await useFactory(...args);\n            return normalizeXltTokenConfig(config);\n          },\n          inject,\n        },\n        XltTokenModule.createStoreProvider(store),\n        XltTokenModule.createStrategyProvider(strategy),\n        XltTokenModule.createStpInterfaceProvider(stpInterface),\n        XltTokenModule.createEventSinkProvider(options.eventSink),\n        XltTokenModule.stpLogicProvider,\n        XltTokenModule.stpPermLogicProvider,\n        XltTokenModule.initProvider,\n        ...providers,\n      ],\n      exports: XltTokenModule.moduleExports,\n      global: isGlobal,\n    };\n  }\n\n  private static createStoreProvider(store?: XltTokenModuleOptions[\"store\"]): Provider {\n    if (!store) return { provide: XLT_TOKEN_STORE, useClass: MemoryStore };\n    return \"useClass\" in store\n      ? { provide: XLT_TOKEN_STORE, useClass: store.useClass }\n      : { provide: XLT_TOKEN_STORE, useValue: store.useValue };\n  }\n\n  private static createStrategyProvider(strategy?: XltTokenModuleOptions[\"strategy\"]): Provider {\n    if (!strategy) return { provide: XLT_TOKEN_STRATEGY, useClass: UuidStrategy };\n    return \"useClass\" in strategy\n      ? { provide: XLT_TOKEN_STRATEGY, useClass: strategy.useClass }\n      : { provide: XLT_TOKEN_STRATEGY, useValue: strategy.useValue };\n  }\n\n  private static createStpInterfaceProvider(\n    stpInterface?: new (...args: any[]) => StpInterface,\n  ): Provider {\n    if (stpInterface) return { provide: XLT_STP_INTERFACE, useClass: stpInterface };\n    return {\n      provide: XLT_STP_INTERFACE,\n      useValue: {\n        getPermissionList: () => {\n          throw new Error(\"StpInterface not registered: getPermissionList\");\n        },\n        getRoleList: () => {\n          throw new Error(\"StpInterface not registered: getRoleList\");\n        },\n      },\n    };\n  }\n\n  private static createEventSinkProvider(eventSink?: XltTokenModuleOptions[\"eventSink\"]): Provider {\n    return { provide: XLT_EVENT_SINK, useValue: eventSink ?? {} };\n  }\n}\n","import { Inject, Injectable } from \"@nestjs/common\";\nimport { RedisStore as BaseRedisStore, type RedisClient } from \"@xlt-token/store-redis\";\n\nexport const XLT_REDIS_CLIENT = \"XLT_REDIS_CLIENT\";\n\n/**\n * @deprecated Import `RedisStore` from `@xlt-token/store-redis` and provide it\n * through `store.useValue` for new applications.\n */\n@Injectable()\nexport class RedisStore extends BaseRedisStore {\n  constructor(\n    @Inject(XLT_REDIS_CLIENT)\n    redisClient: RedisClient,\n  ) {\n    super(redisClient);\n  }\n}\n","import { Inject, Injectable } from \"@nestjs/common\";\nimport { IORedisStore as BaseIORedisStore, type IORedisClient } from \"@xlt-token/store-redis\";\n\nexport const XLT_IOREDIS_CLIENT = \"XLT_IOREDIS_CLIENT\";\n\n/**\n * @deprecated Import `IORedisStore` from `@xlt-token/store-redis` and provide it\n * through `store.useValue` for new applications.\n */\n@Injectable()\nexport class IORedisStore extends BaseIORedisStore {\n  constructor(\n    @Inject(XLT_IOREDIS_CLIENT)\n    redisClient: IORedisClient,\n  ) {\n    super(redisClient);\n  }\n}\n","// 登录校验装饰器\n\nimport { SetMetadata } from \"@nestjs/common\";\nimport { XLT_CHECK_LOGIN_KEY } from \"@xlt-token/core\";\n\n/**\n * 登录校验装饰器\n * @constructor\n */\nexport const XltCheckLogin = () => SetMetadata(XLT_CHECK_LOGIN_KEY, true);\n","// 忽略校验装饰器\n\nimport { SetMetadata } from \"@nestjs/common\";\nimport { XLT_IGNORE_KEY } from \"@xlt-token/core\";\n\nexport const XltIgnore = () => SetMetadata(XLT_IGNORE_KEY, true);\n","// 注入当前用户 ID\n\nimport { createParamDecorator, ExecutionContext } from \"@nestjs/common\";\n\n/**\n * 注入当前用户 ID\n * @constructor\n */\nexport const LoginId = createParamDecorator((data: unknown, ctx: ExecutionContext) => {\n  const request = ctx.switchToHttp().getRequest();\n  return request.stpLoginId;\n});\n","// 注入当前 Token\n\nimport { createParamDecorator, ExecutionContext } from \"@nestjs/common\";\n\n/**\n * 注入当前 Token\n * @constructor\n */\nexport const TokenValue = createParamDecorator((data: any, ctx: ExecutionContext) => {\n  const request = ctx.switchToHttp().getRequest();\n  return request.stpToken;\n});\n","import { XLT_PERMISSION_KEY, XltMode } from \"@xlt-token/core\";\nimport { SetMetadata } from \"@nestjs/common\";\n\n/**\n * 权限检查装饰器\n * @param {string | string[]} permissions 权限列表\n * @param {Object} [options] 模式选项\n * @param {XltMode} [options.mode] 模式选项\n * @constructor\n */\nexport const XltCheckPermission = (permissions: string | string[], options?: { mode: XltMode }) => {\n  const perms = Array.isArray(permissions) ? permissions : [permissions];\n  const mode = options?.mode ?? XltMode.AND;\n  return SetMetadata(XLT_PERMISSION_KEY, { permissions: perms, mode });\n};\n","import { XLT_ROLE_KEY, XltMode } from \"@xlt-token/core\";\nimport { SetMetadata } from \"@nestjs/common\";\n\n/**\n * 角色检查装饰器\n * @param {string | string[]} roles 角色列表\n * @param {Object} [options] 模式选项\n * @param {XltMode} [options.mode] 模式选项\n * @constructor\n */\nexport const XltCheckRole = (roles: string | string[], options?: { mode: XltMode }) => {\n  const _roles = Array.isArray(roles) ? roles : [roles];\n  const mode = options?.mode ?? XltMode.AND;\n  return SetMetadata(XLT_ROLE_KEY, { roles: _roles, mode });\n};\n","import { SetMetadata } from \"@nestjs/common\";\n\nexport const XLT_CHECK_SAFE_KEY = \"XLT_CHECK_SAFE\";\n\nexport const XltCheckSafe = (business: string) => {\n  return SetMetadata(XLT_CHECK_SAFE_KEY, business);\n};\n","import { UnauthorizedException } from \"@nestjs/common\";\nimport { NotLoginType, type XltErrorCode } from \"@xlt-token/core\";\n\nexport class NotLoginException extends UnauthorizedException {\n  public readonly type: NotLoginType;\n  public readonly token: string | undefined;\n\n  constructor(type: NotLoginType, token?: string) {\n    super({\n      statusCode: 401,\n      code: NotLoginException.codeForType(type),\n      type,\n      message: NotLoginException.describeType(type),\n    });\n    this.type = type;\n    this.token = token;\n  }\n\n  private static codeForType(type: NotLoginType): XltErrorCode {\n    const map: Record<NotLoginType, XltErrorCode> = {\n      [NotLoginType.NOT_TOKEN]: \"TOKEN_MISSING\",\n      [NotLoginType.INVALID_TOKEN]: \"TOKEN_INVALID\",\n      [NotLoginType.TOKEN_TIMEOUT]: \"TOKEN_TIMEOUT\",\n      [NotLoginType.TOKEN_FREEZE]: \"TOKEN_FREEZE\",\n      [NotLoginType.BE_REPLACED]: \"TOKEN_REPLACED\",\n      [NotLoginType.KICK_OUT]: \"TOKEN_KICKED_OUT\",\n    };\n    return map[type] ?? \"TOKEN_INVALID\";\n  }\n\n  private static describeType(type: NotLoginType): string {\n    const map: Record<NotLoginType, string> = {\n      [NotLoginType.NOT_TOKEN]: \"未提供 Token\",\n      [NotLoginType.INVALID_TOKEN]: \"Token 无效\",\n      [NotLoginType.TOKEN_TIMEOUT]: \"Token 已过期\",\n      [NotLoginType.TOKEN_FREEZE]: \"Token 已被冻结\",\n      [NotLoginType.BE_REPLACED]: \"已被顶下线\",\n      [NotLoginType.KICK_OUT]: \"已被踢下线\",\n    };\n    return map[type] ?? \"未登录\";\n  }\n}\n","import { ForbiddenException } from \"@nestjs/common\";\nimport { XltMode } from \"@xlt-token/core\";\n\nexport class NotPermissionException extends ForbiddenException {\n  public readonly permission: string | string[];\n  public readonly mode: XltMode;\n\n  constructor(permission: string | string[], mode: XltMode) {\n    super({\n      statusCode: 403,\n      code: \"PERMISSION_DENIED\",\n      permission,\n      mode,\n      message: `缺少权限: ${Array.isArray(permission) ? permission.join(\", \") : permission}`,\n    });\n    this.permission = permission;\n    this.mode = mode;\n  }\n}\n","import { ForbiddenException } from \"@nestjs/common\";\nimport { XltMode } from \"@xlt-token/core\";\n\nexport class NotRoleException extends ForbiddenException {\n  public readonly role: string | string[];\n  public readonly mode: XltMode;\n\n  constructor(role: string | string[], mode: XltMode) {\n    super({\n      statusCode: 403,\n      code: \"ROLE_DENIED\",\n      role,\n      mode,\n      message: `缺少角色: ${Array.isArray(role) ? role.join(\", \") : role}`,\n    });\n    this.role = role;\n    this.mode = mode;\n  }\n}\n","import { ForbiddenException } from \"@nestjs/common\";\n\nexport class NotSafeException extends ForbiddenException {\n  readonly business: string;\n\n  constructor(business: string) {\n    super({\n      statusCode: 403,\n      code: \"SAFE_REQUIRED\",\n      business,\n      message: `二级认证未开启：${business}`,\n    });\n    this.business = business;\n  }\n}\n","import {\n  createExpressContext,\n  type CookieOptions,\n  type ExpressLikeResponse,\n  NotLoginException as CoreNotLoginException,\n  NotPermissionException as CoreNotPermissionException,\n  NotRoleException as CoreNotRoleException,\n  NotSafeException as CoreNotSafeException,\n} from \"@xlt-token/core\";\nimport { NotLoginException } from \"../exceptions/not-login.exception.js\";\nimport { NotPermissionException } from \"../exceptions/not-permission.exception.js\";\nimport { NotRoleException } from \"../exceptions/not-role.exception.js\";\nimport { NotSafeException } from \"../exceptions/not-safe.exception.js\";\n\n/**\n * Fastify reply 的写回 API 与 Express response 不同：\n * - 写 header：Express 用 `res.setHeader(n, v)`，Fastify 用 `reply.header(n, v)`\n * - 写 cookie：Express 用 `res.cookie(n, v, o)`，Fastify 用 `reply.setCookie(n, v, o)`\n *\n * 这里把任意一种 response 归一化成 core 期望的 {@link ExpressLikeResponse} 形态，\n * 让核心层无需感知底层 HTTP 平台。读取侧（headers/cookies/query）两个平台形态一致，\n * 直接复用 core 的 createExpressContext。\n */\nfunction normalizeResponse(res: any): ExpressLikeResponse {\n  return {\n    setHeader(name: string, value: string): void {\n      if (typeof res?.setHeader === \"function\") {\n        // Express response / 原生 Node 响应\n        res.setHeader(name, value);\n      } else if (typeof res?.header === \"function\") {\n        // Fastify reply\n        res.header(name, value);\n      } else {\n        throw new Error(\n          \"xlt-token: 当前 response 不支持写入 header（既无 setHeader 也无 header 方法）\",\n        );\n      }\n    },\n    cookie(name: string, value: string, options?: CookieOptions): void {\n      if (typeof res?.cookie === \"function\") {\n        // Express response（或已注册 @fastify/cookie 暴露的 cookie 别名）\n        res.cookie(name, value, options);\n      } else if (typeof res?.setCookie === \"function\") {\n        // Fastify reply + @fastify/cookie 插件\n        res.setCookie(name, value, options);\n      } else {\n        throw new Error(\n          \"xlt-token: 当前 response 不支持写入 cookie。\" +\n            \"若使用 Fastify，请先注册 @fastify/cookie 插件。\",\n        );\n      }\n    },\n  };\n}\n\nexport function createNestHttpContext(req: any, res: any) {\n  return createExpressContext(req, normalizeResponse(res));\n}\n\nexport function rethrowCoreAuthException(error: unknown): never {\n  if (error instanceof CoreNotLoginException) {\n    throw new NotLoginException(error.type, error.token);\n  }\n  if (error instanceof CoreNotPermissionException) {\n    throw new NotPermissionException(error.permission, error.mode);\n  }\n  if (error instanceof CoreNotRoleException) {\n    throw new NotRoleException(error.role, error.mode);\n  }\n  if (error instanceof CoreNotSafeException) {\n    throw new NotSafeException(error.business);\n  }\n  throw error;\n}\n","// 全局守卫\n\nimport { CanActivate, ExecutionContext, Inject, Injectable, Optional } from \"@nestjs/common\";\nimport { Reflector } from \"@nestjs/core\";\nimport {\n  type AuthResult,\n  StpLogic,\n  StpPermLogic,\n  XLT_CHECK_LOGIN_KEY,\n  XLT_IGNORE_KEY,\n  XLT_PERMISSION_KEY,\n  XLT_ROLE_KEY,\n  XLT_TOKEN_CONFIG,\n  type XltTokenConfig,\n} from \"@xlt-token/core\";\nimport { XLT_CHECK_SAFE_KEY } from \"../decorators/xlt-check-safe.decorator.js\";\nimport { createNestHttpContext, rethrowCoreAuthException } from \"../http/nest-bridge.js\";\n\n@Injectable()\nexport class XltTokenGuard implements CanActivate {\n  constructor(\n    private readonly reflector: Reflector,\n    @Inject(XLT_TOKEN_CONFIG) private readonly config: XltTokenConfig,\n    private readonly stpLogic: StpLogic,\n    @Optional() private readonly stpPermLogic?: StpPermLogic,\n  ) {}\n\n  async canActivate(context: ExecutionContext): Promise<boolean> {\n    if (!this.requiresLogin(context)) return true;\n\n    const request = context.switchToHttp().getRequest();\n    const response = context.switchToHttp().getResponse();\n\n    let result: AuthResult;\n    try {\n      result = await this.stpLogic.checkLogin(createNestHttpContext(request, response));\n    } catch (error) {\n      rethrowCoreAuthException(error);\n    }\n\n    const business = this.getBusiness(context);\n    request.stpLoginId = result.loginId;\n    request.stpToken = result.token;\n\n    try {\n      if (this.stpPermLogic) {\n        const handler = context.getHandler();\n        const cls = context.getClass();\n\n        const permMeta = this.reflector.getAllAndOverride(XLT_PERMISSION_KEY, [handler, cls]);\n        if (permMeta) {\n          await this.stpPermLogic.checkPermission(\n            result.loginId!,\n            permMeta.permissions,\n            permMeta.mode,\n          );\n        }\n\n        const roleMeta = this.reflector.getAllAndOverride(XLT_ROLE_KEY, [handler, cls]);\n        if (roleMeta) {\n          await this.stpPermLogic.checkRole(result.loginId!, roleMeta.roles, roleMeta.mode);\n        }\n      }\n\n      if (business) {\n        await this.stpLogic.checkSafe(result.token!, business);\n      }\n    } catch (error) {\n      rethrowCoreAuthException(error);\n    }\n\n    return true;\n  }\n\n  private requiresLogin(context: ExecutionContext): boolean {\n    const isIgnored = this.reflector.getAllAndOverride<boolean>(XLT_IGNORE_KEY, [\n      context.getHandler(),\n      context.getClass(),\n    ]);\n\n    if (this.config.defaultCheck) {\n      return !isIgnored;\n    }\n\n    const shouldCheck = this.reflector.getAllAndOverride<boolean>(XLT_CHECK_LOGIN_KEY, [\n      context.getHandler(),\n      context.getClass(),\n    ]);\n    return shouldCheck ?? false;\n  }\n\n  private getBusiness(context: ExecutionContext): string {\n    return this.reflector.getAllAndOverride<string>(XLT_CHECK_SAFE_KEY, [\n      context.getHandler(),\n      context.getClass(),\n    ]);\n  }\n}\n","import { CanActivate, ExecutionContext, Inject, Injectable } from \"@nestjs/common\";\nimport { Reflector } from \"@nestjs/core\";\nimport {\n  NotLoginException as CoreNotLoginException,\n  NotLoginType,\n  StpLogic,\n  XLT_CHECK_LOGIN_KEY,\n  XLT_IGNORE_KEY,\n  XLT_TOKEN_CONFIG,\n  type XltTokenConfig,\n} from \"@xlt-token/core\";\nimport { NotLoginException } from \"../exceptions/not-login.exception.js\";\nimport { createNestHttpContext } from \"../http/nest-bridge.js\";\n\n@Injectable()\nexport abstract class XltAbstractLoginGuard implements CanActivate {\n  protected constructor(\n    protected readonly reflector: Reflector,\n    @Inject(XLT_TOKEN_CONFIG) protected readonly config: XltTokenConfig,\n    protected readonly stpLogic: StpLogic,\n  ) {}\n\n  async canActivate(ctx: ExecutionContext): Promise<boolean> {\n    if (!this.requiresLogin(ctx)) return true;\n\n    const request = ctx.switchToHttp().getRequest();\n    const response = ctx.switchToHttp().getResponse();\n\n    let result: { ok: boolean; loginId?: string; token?: string; reason?: NotLoginType };\n    try {\n      result = await this.stpLogic.checkLogin(createNestHttpContext(request, response));\n    } catch (err) {\n      if (err instanceof CoreNotLoginException) {\n        await this.onAuthFail?.({ ok: false, reason: err.type, token: err.token }, request);\n        throw new NotLoginException(err.type, err.token);\n      }\n      throw err;\n    }\n\n    request.stpLoginId = result.loginId;\n    request.stpToken = result.token;\n    await this.onAuthSuccess?.(result, request);\n    return true;\n  }\n\n  protected requiresLogin(ctx: ExecutionContext): boolean {\n    const isIgnored = this.reflector.getAllAndOverride<boolean>(XLT_IGNORE_KEY, [\n      ctx.getHandler(),\n      ctx.getClass(),\n    ]);\n\n    if (this.config.defaultCheck) return !isIgnored;\n\n    return (\n      this.reflector.getAllAndOverride<boolean>(XLT_CHECK_LOGIN_KEY, [\n        ctx.getHandler(),\n        ctx.getClass(),\n      ]) ?? false\n    );\n  }\n\n  protected onAuthSuccess?(\n    result: {\n      ok: boolean;\n      loginId?: string | undefined;\n      token?: string | undefined;\n      reason?: NotLoginType | undefined;\n    },\n    request: any,\n  ): void | Promise<void>;\n\n  protected onAuthFail?(\n    result: {\n      ok: boolean;\n      loginId?: string | undefined;\n      token?: string | undefined;\n      reason?: NotLoginType | undefined;\n    },\n    request: any,\n  ): void | Promise<void>;\n\n  protected onPermissionDenied?(\n    result: {\n      ok: boolean;\n      loginId?: string | undefined;\n      token?: string | undefined;\n      reason?: NotLoginType | undefined;\n    },\n    request: any,\n  ): void | Promise<void>;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;AA+CO,2BAAM,eAAe;;;;;0BAC2B;GACnD,SAASA;GACT,aACE,QACA,OACA,UACA,cACG,IAAIA,WAAS,QAAQ,OAAO,UAAU,UAAU;GACrD,QAAQ;IAACC;IAAkBC;IAAiBC;IAAoBC;IAAe;GAChF;;;8BACwD;GACvD,SAASC;GACT,aAAa,cAA4B,OAAsB,WAC7D,IAAIA,eAAa,cAAc,OAAO,OAAO;GAC/C,QAAQ;IAACC;IAAmBJ;IAAiBD;IAAiB;GAC/D;;;sBACgD;GAC/C,SAAS;GACT,aAAa,UAAoB,iBAA+B;AAC9D,kBAAY,SAAS;AACrB,sBAAgB,aAAa;AAC7B,WAAO;;GAET,QAAQ,CAACD,YAAUK,eAAa;GACjC;;;uBACuC;GACtCJ;GACAC;GACAC;GACAH;GACAK;GACD;;CAED,OAAO,QAAQ,UAAiC,EAAE,EAAE;EAClD,MAAM,EACJ,QAAQ,YACR,OACA,UACA,WAAW,OACX,YAAY,EAAE,EACd,iBACE;AAEJ,SAAO;GACL;GACA,WAAW;IACT;KAAE,SAASJ;KAAkB,UAAU,wBAAwB,WAAW;KAAE;oBAC7D,oBAAoB,MAAM;oBAC1B,uBAAuB,SAAS;oBAChC,2BAA2B,aAAa;oBACxC,wBAAwB,QAAQ,UAAU;oBAC1C;oBACA;oBACA;IACf,GAAG;IACJ;GACD,yBAAwB;GACxB,QAAQ;GACT;;CAGH,OAAO,aAAa,SAAqC;EACvD,MAAM,EACJ,YACA,SAAS,EAAE,EACX,UAAU,EAAE,EACZ,OACA,UACA,WAAW,OACX,YAAY,EAAE,EACd,iBACE;AAEJ,SAAO;GACL;GACA;GACA,WAAW;IACT;KACE,SAASA;KACT,YAAY,OAAO,GAAG,SAAgB;MACpC,MAAM,EAAE,SAAS,EAAE,KAAK,MAAM,WAAW,GAAG,KAAK;AACjD,aAAO,wBAAwB,OAAO;;KAExC;KACD;oBACc,oBAAoB,MAAM;oBAC1B,uBAAuB,SAAS;oBAChC,2BAA2B,aAAa;oBACxC,wBAAwB,QAAQ,UAAU;oBAC1C;oBACA;oBACA;IACf,GAAG;IACJ;GACD,yBAAwB;GACxB,QAAQ;GACT;;CAGH,OAAe,oBAAoB,OAAkD;AACnF,MAAI,CAAC,MAAO,QAAO;GAAE,SAASC;GAAiB,UAAUK;GAAa;AACtE,SAAO,cAAc,QACjB;GAAE,SAASL;GAAiB,UAAU,MAAM;GAAU,GACtD;GAAE,SAASA;GAAiB,UAAU,MAAM;GAAU;;CAG5D,OAAe,uBAAuB,UAAwD;AAC5F,MAAI,CAAC,SAAU,QAAO;GAAE,SAASC;GAAoB,UAAUK;GAAc;AAC7E,SAAO,cAAc,WACjB;GAAE,SAASL;GAAoB,UAAU,SAAS;GAAU,GAC5D;GAAE,SAASA;GAAoB,UAAU,SAAS;GAAU;;CAGlE,OAAe,2BACb,cACU;AACV,MAAI,aAAc,QAAO;GAAE,SAASG;GAAmB,UAAU;GAAc;AAC/E,SAAO;GACL,SAASA;GACT,UAAU;IACR,yBAAyB;AACvB,WAAM,IAAI,MAAM,iDAAiD;;IAEnE,mBAAmB;AACjB,WAAM,IAAI,MAAM,2CAA2C;;IAE9D;GACF;;CAGH,OAAe,wBAAwB,WAA0D;AAC/F,SAAO;GAAE,SAASF;GAAgB,UAAU,aAAa,EAAE;GAAE;;;+CArIhE,OAAO,EAAE,CAAC;;;;;;;;;;;;;;;;;;AC3CX,MAAa,mBAAmB;AAOzB,uBAAM,mBAAmBK,aAAe;CAC7C,YACE,AACA,aACA;AACA,QAAM,YAAY;;;;CANrB,YAAY;oBAGR,OAAO,iBAAiB;;;;;;ACT7B,MAAa,qBAAqB;AAO3B,yBAAM,qBAAqBC,eAAiB;CACjD,YACE,AACA,aACA;AACA,QAAM,YAAY;;;;CANrB,YAAY;oBAGR,OAAO,mBAAmB;;;;;;;;;;ACH/B,MAAa,sBAAsB,YAAY,qBAAqB,KAAK;;;;ACJzE,MAAa,kBAAkB,YAAY,gBAAgB,KAAK;;;;;;;;ACGhE,MAAa,UAAU,sBAAsB,MAAe,QAA0B;AAEpF,QADgB,IAAI,cAAc,CAAC,YAAY,CAChC;EACf;;;;;;;;ACHF,MAAa,aAAa,sBAAsB,MAAW,QAA0B;AAEnF,QADgB,IAAI,cAAc,CAAC,YAAY,CAChC;EACf;;;;;;;;;;;ACDF,MAAa,sBAAsB,aAAgC,YAAgC;AAGjG,QAAO,YAAY,oBAAoB;EAAE,aAF3B,MAAM,QAAQ,YAAY,GAAG,cAAc,CAAC,YAAY;EAET,MADhD,SAAS,QAAQC,UAAQ;EAC6B,CAAC;;;;;;;;;;;;ACHtE,MAAa,gBAAgB,OAA0B,YAAgC;AAGrF,QAAO,YAAY,cAAc;EAAE,OAFpB,MAAM,QAAQ,MAAM,GAAG,QAAQ,CAAC,MAAM;EAEH,MADrC,SAAS,QAAQC,UAAQ;EACkB,CAAC;;;;;ACX3D,MAAa,qBAAqB;AAElC,MAAa,gBAAgB,aAAqB;AAChD,QAAO,YAAY,oBAAoB,SAAS;;;;;ACFlD,IAAa,oBAAb,MAAa,0BAA0B,sBAAsB;CAI3D,YAAY,MAAoB,OAAgB;AAC9C,QAAM;GACJ,YAAY;GACZ,MAAM,kBAAkB,YAAY,KAAK;GACzC;GACA,SAAS,kBAAkB,aAAa,KAAK;GAC9C,CAAC;AACF,OAAK,OAAO;AACZ,OAAK,QAAQ;;CAGf,OAAe,YAAY,MAAkC;AAS3D,SARgD;IAC7CC,eAAa,YAAY;IACzBA,eAAa,gBAAgB;IAC7BA,eAAa,gBAAgB;IAC7BA,eAAa,eAAe;IAC5BA,eAAa,cAAc;IAC3BA,eAAa,WAAW;GAC1B,CACU,SAAS;;CAGtB,OAAe,aAAa,MAA4B;AAStD,SAR0C;IACvCA,eAAa,YAAY;IACzBA,eAAa,gBAAgB;IAC7BA,eAAa,gBAAgB;IAC7BA,eAAa,eAAe;IAC5BA,eAAa,cAAc;IAC3BA,eAAa,WAAW;GAC1B,CACU,SAAS;;;;;;ACpCxB,IAAa,yBAAb,cAA4C,mBAAmB;CAI7D,YAAY,YAA+B,MAAe;AACxD,QAAM;GACJ,YAAY;GACZ,MAAM;GACN;GACA;GACA,SAAS,SAAS,MAAM,QAAQ,WAAW,GAAG,WAAW,KAAK,KAAK,GAAG;GACvE,CAAC;AACF,OAAK,aAAa;AAClB,OAAK,OAAO;;;;;;ACbhB,IAAa,mBAAb,cAAsC,mBAAmB;CAIvD,YAAY,MAAyB,MAAe;AAClD,QAAM;GACJ,YAAY;GACZ,MAAM;GACN;GACA;GACA,SAAS,SAAS,MAAM,QAAQ,KAAK,GAAG,KAAK,KAAK,KAAK,GAAG;GAC3D,CAAC;AACF,OAAK,OAAO;AACZ,OAAK,OAAO;;;;;;ACdhB,IAAa,mBAAb,cAAsC,mBAAmB;CAGvD,YAAY,UAAkB;AAC5B,QAAM;GACJ,YAAY;GACZ,MAAM;GACN;GACA,SAAS,WAAW;GACrB,CAAC;AACF,OAAK,WAAW;;;;;;;;;;;;;;;ACWpB,SAAS,kBAAkB,KAA+B;AACxD,QAAO;EACL,UAAU,MAAc,OAAqB;AAC3C,OAAI,OAAO,KAAK,cAAc,WAE5B,KAAI,UAAU,MAAM,MAAM;YACjB,OAAO,KAAK,WAAW,WAEhC,KAAI,OAAO,MAAM,MAAM;OAEvB,OAAM,IAAI,MACR,iEACD;;EAGL,OAAO,MAAc,OAAe,SAA+B;AACjE,OAAI,OAAO,KAAK,WAAW,WAEzB,KAAI,OAAO,MAAM,OAAO,QAAQ;YACvB,OAAO,KAAK,cAAc,WAEnC,KAAI,UAAU,MAAM,OAAO,QAAQ;OAEnC,OAAM,IAAI,MACR,2EAED;;EAGN;;AAGH,SAAgB,sBAAsB,KAAU,KAAU;AACxD,QAAOC,uBAAqB,KAAK,kBAAkB,IAAI,CAAC;;AAG1D,SAAgB,yBAAyB,OAAuB;AAC9D,KAAI,iBAAiBC,oBACnB,OAAM,IAAI,kBAAkB,MAAM,MAAM,MAAM,MAAM;AAEtD,KAAI,iBAAiBC,yBACnB,OAAM,IAAI,uBAAuB,MAAM,YAAY,MAAM,KAAK;AAEhE,KAAI,iBAAiBC,mBACnB,OAAM,IAAI,iBAAiB,MAAM,MAAM,MAAM,KAAK;AAEpD,KAAI,iBAAiBC,mBACnB,OAAM,IAAI,iBAAiB,MAAM,SAAS;AAE5C,OAAM;;;;;;ACrDD,0BAAM,cAAqC;CAChD,YACE,AAAiB,WACjB,AAA2C,QAC3C,AAAiB,UACjB,AAA6B,cAC7B;EAJiB;EAC0B;EAC1B;EACY;;CAG/B,MAAM,YAAY,SAA6C;AAC7D,MAAI,CAAC,KAAK,cAAc,QAAQ,CAAE,QAAO;EAEzC,MAAM,UAAU,QAAQ,cAAc,CAAC,YAAY;EACnD,MAAM,WAAW,QAAQ,cAAc,CAAC,aAAa;EAErD,IAAI;AACJ,MAAI;AACF,YAAS,MAAM,KAAK,SAAS,WAAW,sBAAsB,SAAS,SAAS,CAAC;WAC1E,OAAO;AACd,4BAAyB,MAAM;;EAGjC,MAAM,WAAW,KAAK,YAAY,QAAQ;AAC1C,UAAQ,aAAa,OAAO;AAC5B,UAAQ,WAAW,OAAO;AAE1B,MAAI;AACF,OAAI,KAAK,cAAc;IACrB,MAAM,UAAU,QAAQ,YAAY;IACpC,MAAM,MAAM,QAAQ,UAAU;IAE9B,MAAM,WAAW,KAAK,UAAU,kBAAkB,oBAAoB,CAAC,SAAS,IAAI,CAAC;AACrF,QAAI,SACF,OAAM,KAAK,aAAa,gBACtB,OAAO,SACP,SAAS,aACT,SAAS,KACV;IAGH,MAAM,WAAW,KAAK,UAAU,kBAAkB,cAAc,CAAC,SAAS,IAAI,CAAC;AAC/E,QAAI,SACF,OAAM,KAAK,aAAa,UAAU,OAAO,SAAU,SAAS,OAAO,SAAS,KAAK;;AAIrF,OAAI,SACF,OAAM,KAAK,SAAS,UAAU,OAAO,OAAQ,SAAS;WAEjD,OAAO;AACd,4BAAyB,MAAM;;AAGjC,SAAO;;CAGT,AAAQ,cAAc,SAAoC;EACxD,MAAM,YAAY,KAAK,UAAU,kBAA2B,gBAAgB,CAC1E,QAAQ,YAAY,EACpB,QAAQ,UAAU,CACnB,CAAC;AAEF,MAAI,KAAK,OAAO,aACd,QAAO,CAAC;AAOV,SAJoB,KAAK,UAAU,kBAA2B,qBAAqB,CACjF,QAAQ,YAAY,EACpB,QAAQ,UAAU,CACnB,CAAC,IACoB;;CAGxB,AAAQ,YAAY,SAAmC;AACrD,SAAO,KAAK,UAAU,kBAA0B,oBAAoB,CAClE,QAAQ,YAAY,EACpB,QAAQ,UAAU,CACnB,CAAC;;;;CA7EL,YAAY;oBAIR,OAAOC,mBAAiB;oBAExB,UAAU;;;;;;;;;;;;ACTR,kCAAe,sBAA6C;CACjE,AAAU,YACR,AAAmB,WACnB,AAA6C,QAC7C,AAAmB,UACnB;EAHmB;EAC0B;EAC1B;;CAGrB,MAAM,YAAY,KAAyC;AACzD,MAAI,CAAC,KAAK,cAAc,IAAI,CAAE,QAAO;EAErC,MAAM,UAAU,IAAI,cAAc,CAAC,YAAY;EAC/C,MAAM,WAAW,IAAI,cAAc,CAAC,aAAa;EAEjD,IAAI;AACJ,MAAI;AACF,YAAS,MAAM,KAAK,SAAS,WAAW,sBAAsB,SAAS,SAAS,CAAC;WAC1E,KAAK;AACZ,OAAI,eAAeC,qBAAuB;AACxC,UAAM,KAAK,aAAa;KAAE,IAAI;KAAO,QAAQ,IAAI;KAAM,OAAO,IAAI;KAAO,EAAE,QAAQ;AACnF,UAAM,IAAI,kBAAkB,IAAI,MAAM,IAAI,MAAM;;AAElD,SAAM;;AAGR,UAAQ,aAAa,OAAO;AAC5B,UAAQ,WAAW,OAAO;AAC1B,QAAM,KAAK,gBAAgB,QAAQ,QAAQ;AAC3C,SAAO;;CAGT,AAAU,cAAc,KAAgC;EACtD,MAAM,YAAY,KAAK,UAAU,kBAA2B,gBAAgB,CAC1E,IAAI,YAAY,EAChB,IAAI,UAAU,CACf,CAAC;AAEF,MAAI,KAAK,OAAO,aAAc,QAAO,CAAC;AAEtC,SACE,KAAK,UAAU,kBAA2B,qBAAqB,CAC7D,IAAI,YAAY,EAChB,IAAI,UAAU,CACf,CAAC,IAAI;;;;CA3CX,YAAY;oBAIR,OAAOC,mBAAiB"}

package/package.json

@@ -1,29 +1,35 @@
 {
   "name": "@xlt-token/nestjs",
-  "version": "1.2.0",
+  "version": "2.1.0",
   "description": "NestJS integration for xlt-token",
   "keywords": [
-    "nestjs",
-    "token",
     "auth",
     "jwt",
-    "session"
+    "nestjs",
+    "session",
+    "token"
   ],
-  "author": "xltorg",
+  "homepage": "https://xiaolangtou.github.io/xlt-token/",
+  "bugs": {
+    "url": "https://github.com/xiaoLangtou/xlt-token/issues"
+  },
   "license": "MIT",
+  "author": "xltorg",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/xiaoLangtou/xlt-token.git",
     "directory": "packages/nestjs"
   },
-  "bugs": {
-    "url": "https://github.com/xiaoLangtou/xlt-token/issues"
-  },
-  "homepage": "https://xiaolangtou.github.io/xlt-token/",
-  "publishConfig": {
-    "access": "public"
-  },
+  "files": [
+    "dist",
+    "LICENSE",
+    "README.md"
+  ],
   "type": "module",
+  "sideEffects": false,
+  "main": "./dist/index.cjs",
+  "module": "./dist/index.mjs",
+  "types": "./dist/index.d.cts",
   "exports": {
     ".": {
       "import": {
@@ -37,33 +43,13 @@
     },
     "./package.json": "./package.json"
   },
-  "main": "./dist/index.cjs",
-  "module": "./dist/index.mjs",
-  "types": "./dist/index.d.cts",
-  "sideEffects": false,
-  "files": [
-    "dist",
-    "LICENSE",
-    "README.md"
-  ],
-  "peerDependencies": {
-    "@nestjs/common": "^10.0.0 || ^11.0.0 || ^12.0.0",
-    "@nestjs/core": "^10.0.0 || ^11.0.0 || ^12.0.0",
-    "jsonwebtoken": "^9.0.0",
-    "redis": "^4.0.0 || ^5.0.0",
-    "reflect-metadata": "^0.1.13 || ^0.2.0",
-    "rxjs": "^7.0.0"
-  },
-  "peerDependenciesMeta": {
-    "redis": {
-      "optional": true
-    },
-    "jsonwebtoken": {
-      "optional": true
-    }
+  "publishConfig": {
+    "access": "public"
   },
   "dependencies": {
-    "@xlt-token/core": "^1.2.0",
+    "@xlt-token/core": "^2.1.0",
+    "@xlt-token/jwt": "^2.1.0",
+    "@xlt-token/store-redis": "^2.1.0",
     "uuid": "^10.0.0"
   },
   "devDependencies": {
@@ -88,9 +74,16 @@
     "unplugin-swc": "^1.5.9",
     "vitest": "^2.0.0"
   },
+  "peerDependencies": {
+    "@nestjs/common": "^10.0.0 || ^11.0.0 || ^12.0.0",
+    "@nestjs/core": "^10.0.0 || ^11.0.0 || ^12.0.0",
+    "reflect-metadata": "^0.1.13 || ^0.2.0",
+    "rxjs": "^7.0.0"
+  },
   "scripts": {
     "build": "tsdown",
     "build:watch": "tsdown --watch",
+    "typecheck": "tsc --noEmit",
     "test": "vitest run",
     "test:cov": "vitest run --coverage",
     "test:e2e": "vitest run --config vitest.e2e.config.ts",